Votre question

(Résolu) virus ou pas pc qui rame comment faire ( help)

Tags :
  • Sécurité
Dernière réponse : dans Sécurité et virus
11 Novembre 2008 08:53:31

bonjour a tous
voila mon gros probléme mon PC rame énormément , j'ai des fenêtres qui
s'ouvre toutes seule et mon oncle me dit que j'ai trop de toolbar sur explorer et peu être un virus ou autre derriere tous ça.
voila je suis novice en informatique et les termes que vous employez ne m'en dise pas plus.
toutefois j'ai surfer un peut sur votre site et peut être pourriez-vous m'aider.
Donc je ne sais pas part quoi commencer alors je vous ai fait un rapport HijackThis .
Merci d'avance pour votre aide.
Angie

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:36:23, on 11/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\VM305_STI.EXE
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SendHelp] C:\DOCUME~1\Angie\APPLIC~1\MANAGE~1\multicastcomp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986....
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 10011 bytes

Autres pages sur : resolu virus rame help

11 Novembre 2008 09:58:19

Bonjour
Télécharge Lop S&D.exe sur ton bureau

  • Double-clique dessus pour lancer l'installation
  • Puis double-clique sur le raccourci Lop S&D présent sur ton bureau
  • Sélectionne la langue souhaitée , puis choisis l'Option 1 ( Recherche )
  • Patiente jusqu'à la fin du scan
  • Poste le rapport généré ( C:\lopR.txt )

    ( Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )
    11 Novembre 2008 11:11:25

    bonjour et merci pour ton aide et voici le rapport .
    --------------------\\ Lop S&D 4.2.4-9c XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3200+ )
    BIOS : Ver 1.00PARTTBL
    USER : Angie ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1169 [VPS 081110-1] 4.8.1169 (Activated)
    C:\ (Local Disk) - NTFS - Total:37 Go (Free:12 Go)
    D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

    "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
    Option : [1] ( 11/11/2008|10:48 )

    --------------------\\ Listing des dossiers dans APPLIC~1

    [14/05/2008|14:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [21/03/2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [15/05/2008|12:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
    [17/04/2008|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
    [10/08/2007|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
    [10/11/2008|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA
    [10/08/2007|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpqwmi
    [10/08/2007|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
    [05/11/2008|02:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB
    [10/11/2008|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
    [13/08/2007|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
    [06/01/2008|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [10/08/2007|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
    [03/10/2008|17:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
    [18/06/2008|11:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
    [05/10/2007|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
    [18/06/2008|11:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
    [10/08/2007|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    [06/01/2008|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
    [22/12/2007|00:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

    [22/03/2008|21:03] C:\DOCUME~1\Angie\APPLIC~1\Adobe
    [23/03/2008|11:32] C:\DOCUME~1\Angie\APPLIC~1\AdobeUM
    [03/10/2008|18:52] C:\DOCUME~1\Angie\APPLIC~1\Angie
    [10/08/2007|12:07] C:\DOCUME~1\Angie\APPLIC~1\Apple Computer
    [19/10/2008|16:21] C:\DOCUME~1\Angie\APPLIC~1\Application Data
    [15/05/2008|20:43] C:\DOCUME~1\Angie\APPLIC~1\Azureus
    [27/10/2008|16:32] C:\DOCUME~1\Angie\APPLIC~1\cs
    [08/07/2008|14:12] C:\DOCUME~1\Angie\APPLIC~1\Documents and Settings
    [17/04/2008|19:33] C:\DOCUME~1\Angie\APPLIC~1\EoRezo
    [10/08/2007|14:32] C:\DOCUME~1\Angie\APPLIC~1\Google
    [22/05/2008|08:12] C:\DOCUME~1\Angie\APPLIC~1\Hotbar
    [22/05/2008|08:12] C:\DOCUME~1\Angie\APPLIC~1\Hotbar_Icons
    [03/06/2008|16:21] C:\DOCUME~1\Angie\APPLIC~1\ICQ
    [18/02/2008|12:19] C:\DOCUME~1\Angie\APPLIC~1\ICQ Toolbar
    [10/08/2007|11:20] C:\DOCUME~1\Angie\APPLIC~1\Identities
    [18/02/2008|12:07] C:\DOCUME~1\Angie\APPLIC~1\InstallShield
    [25/11/2007|00:02] C:\DOCUME~1\Angie\APPLIC~1\InterTrust
    [12/08/2007|21:04] C:\DOCUME~1\Angie\APPLIC~1\InterVideo
    [16/02/2008|13:01] C:\DOCUME~1\Angie\APPLIC~1\ItsLabel
    [15/09/2007|15:26] C:\DOCUME~1\Angie\APPLIC~1\Leadertech
    [09/11/2008|13:45] C:\DOCUME~1\Angie\APPLIC~1\LimeWire
    [06/10/2007|11:44] C:\DOCUME~1\Angie\APPLIC~1\Macromedia
    [17/04/2008|19:22] C:\DOCUME~1\Angie\APPLIC~1\MakeUpPilot
    [10/11/2008|20:03] C:\DOCUME~1\Angie\APPLIC~1\Malwarebytes
    [05/11/2008|02:08] C:\DOCUME~1\Angie\APPLIC~1\Manager Bleh Meet
    [11/01/2008|22:47] C:\DOCUME~1\Angie\APPLIC~1\MessengerSkinner
    [11/10/2008|18:47] C:\DOCUME~1\Angie\APPLIC~1\Microsoft
    [18/02/2008|12:11] C:\DOCUME~1\Angie\APPLIC~1\Mozilla
    [17/04/2008|19:54] C:\DOCUME~1\Angie\APPLIC~1\MSNInstaller
    [26/08/2008|18:55] C:\DOCUME~1\Angie\APPLIC~1\report
    [26/12/2007|22:26] C:\DOCUME~1\Angie\APPLIC~1\SecuROM
    [11/11/2008|10:47] C:\DOCUME~1\Angie\APPLIC~1\Skype
    [11/11/2008|08:09] C:\DOCUME~1\Angie\APPLIC~1\skypePM
    [22/09/2007|22:19] C:\DOCUME~1\Angie\APPLIC~1\Sonic
    [18/06/2008|11:49] C:\DOCUME~1\Angie\APPLIC~1\Sony Ericsson
    [16/08/2007|10:46] C:\DOCUME~1\Angie\APPLIC~1\Sun
    [10/08/2007|12:50] C:\DOCUME~1\Angie\APPLIC~1\Symantec
    [09/09/2007|10:34] C:\DOCUME~1\Angie\APPLIC~1\SYSTRAN
    [20/06/2008|13:14] C:\DOCUME~1\Angie\APPLIC~1\Teleca
    [22/05/2008|08:12] C:\DOCUME~1\Angie\APPLIC~1\WeatherDPA
    [01/06/2008|08:30] C:\DOCUME~1\Angie\APPLIC~1\Windows Live Writer
    [07/07/2008|19:13] C:\DOCUME~1\Angie\APPLIC~1\WinRAR

    [12/12/2007|22:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [10/08/2007|11:44] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [10/08/2007|11:16] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft



    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [11/11/2008 09:00][--ah-----] C:\WINDOWS\tasks\B77EBDA393A12D13.job
    [11/11/2008 09:41][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
    [11/11/2008 08:15][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    ( B77EBDA393A12D13.job )=( c:\docume~1\angie\applic~1\manage~1\LoveKnobMpeg.exe )

    --------------------\\ Listing des dossiers dans C:\Program Files

    [21/03/2008|20:32] C:\Program Files\Adobe
    [05/10/2007|18:48] C:\Program Files\Alwil Software
    [10/08/2007|11:47] C:\Program Files\AMD
    [10/08/2007|11:56] C:\Program Files\ATI Technologies
    [06/01/2008|15:14] C:\Program Files\Circle Developement
    [10/08/2007|11:07] C:\Program Files\ComPlus Applications
    [10/08/2007|11:55] C:\Program Files\CONEXANT
    [10/08/2007|12:04] C:\Program Files\CPQ
    [21/03/2008|20:43] C:\Program Files\Disc2Phone
    [26/12/2007|22:17] C:\Program Files\Electronic Arts
    [03/08/2008|23:19] C:\Program Files\eMule
    [17/04/2008|19:33] C:\Program Files\EoRezo
    [03/10/2008|17:21] C:\Program Files\Fichiers communs
    [10/08/2007|15:20] C:\Program Files\Google
    [10/08/2007|12:05] C:\Program Files\Hewlett-Packard
    [10/08/2007|12:05] C:\Program Files\Hp
    [10/08/2007|12:20] C:\Program Files\HPQ
    [03/06/2008|16:19] C:\Program Files\ICQ6
    [24/06/2008|15:49] C:\Program Files\ICQToolbar
    [10/08/2007|15:45] C:\Program Files\IncrediMail
    [14/05/2008|14:14] C:\Program Files\InstallShield Installation Information
    [17/10/2008|18:12] C:\Program Files\Internet Explorer
    [10/08/2007|12:02] C:\Program Files\InterVideo
    [10/08/2007|12:06] C:\Program Files\iPod
    [10/08/2007|12:06] C:\Program Files\iTunes
    [11/11/2008|07:29] C:\Program Files\Java
    [09/09/2007|10:31] C:\Program Files\Larousse
    [02/08/2008|14:50] C:\Program Files\LimeWire
    [17/04/2008|19:22] C:\Program Files\MakeUp Pilot
    [10/11/2008|20:03] C:\Program Files\Malwarebytes' Anti-Malware
    [05/11/2008|02:08] C:\Program Files\Manager Bleh Meet
    [11/11/2008|08:08] C:\Program Files\Messenger
    [31/08/2008|19:30] C:\Program Files\Messenger Plus! Live
    [07/11/2007|20:29] C:\Program Files\Microsoft CAPICOM 2.1.0.2
    [10/08/2007|11:12] C:\Program Files\microsoft frontpage
    [26/10/2007|20:34] C:\Program Files\Microsoft Office
    [07/11/2007|09:33] C:\Program Files\Microsoft SQL Server Compact Edition
    [11/11/2008|08:01] C:\Program Files\Movie Maker
    [26/10/2007|20:33] C:\Program Files\MSECache
    [17/04/2008|19:52] C:\Program Files\MSN
    [10/08/2007|11:06] C:\Program Files\MSN Gaming Zone
    [20/10/2007|23:00] C:\Program Files\MSXML 4.0
    [11/11/2008|07:52] C:\Program Files\NetMeeting
    [10/08/2007|11:06] C:\Program Files\Online Services
    [11/11/2008|07:52] C:\Program Files\Outlook Express
    [24/03/2008|16:58] C:\Program Files\PhotoFiltre
    [16/02/2008|13:08] C:\Program Files\PhotoFiltre Studio
    [01/09/2007|10:15] C:\Program Files\QuickTime
    [10/08/2007|12:42] C:\Program Files\SAGEM
    [10/08/2007|11:25] C:\Program Files\Securitoo
    [10/08/2007|11:09] C:\Program Files\Services en ligne
    [03/10/2008|17:21] C:\Program Files\Skype
    [10/08/2007|12:17] C:\Program Files\Sonic
    [18/06/2008|11:48] C:\Program Files\Sony Ericsson
    [03/06/2008|18:40] C:\Program Files\Soulseek-Test
    [22/04/2008|17:57] C:\Program Files\Sun
    [10/08/2007|12:08] C:\Program Files\Synaptics
    [09/09/2007|10:24] C:\Program Files\SYSTRAN
    [11/11/2008|08:35] C:\Program Files\Trend Micro
    [10/08/2007|11:20] C:\Program Files\Uninstall Information
    [14/05/2008|14:14] C:\Program Files\Vimicro
    [20/09/2008|17:46] C:\Program Files\Western Digital
    [20/09/2008|17:28] C:\Program Files\Western Digital Technologies
    [24/11/2007|23:49] C:\Program Files\WIDCOMM
    [27/02/2008|21:39] C:\Program Files\Windows Live
    [06/01/2008|15:02] C:\Program Files\Windows Live Favorites
    [06/01/2008|15:02] C:\Program Files\Windows Live Toolbar
    [13/06/2008|07:49] C:\Program Files\Windows Media Connect 2
    [11/11/2008|07:52] C:\Program Files\Windows Media Player
    [11/11/2008|07:52] C:\Program Files\Windows NT
    [10/08/2007|11:09] C:\Program Files\WindowsUpdate
    [10/08/2007|11:12] C:\Program Files\xerox
    [21/12/2007|23:57] C:\Program Files\Yahoo!

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [25/11/2007|00:02] C:\Program Files\Fichiers communs\Adobe
    [10/08/2007|12:42] C:\Program Files\Fichiers communs\InstallShield
    [22/04/2008|17:54] C:\Program Files\Fichiers communs\Java
    [06/01/2008|15:00] C:\Program Files\Fichiers communs\Microsoft Shared
    [10/08/2007|11:08] C:\Program Files\Fichiers communs\MSSoap
    [10/08/2007|12:59] C:\Program Files\Fichiers communs\ODBC
    [10/08/2007|11:08] C:\Program Files\Fichiers communs\Services
    [03/10/2008|17:21] C:\Program Files\Fichiers communs\Skype
    [07/09/2007|21:05] C:\Program Files\Fichiers communs\snpstd3
    [10/08/2007|12:16] C:\Program Files\Fichiers communs\Sonic Shared
    [18/06/2008|11:49] C:\Program Files\Fichiers communs\Sony Ericsson Shared
    [10/08/2007|12:59] C:\Program Files\Fichiers communs\SpeechEngines
    [10/08/2007|12:16] C:\Program Files\Fichiers communs\SureThing Shared
    [05/10/2007|21:15] C:\Program Files\Fichiers communs\Symantec Shared
    [11/11/2008|07:52] C:\Program Files\Fichiers communs\System
    [18/06/2008|11:51] C:\Program Files\Fichiers communs\Teleca Shared
    [10/08/2007|12:17] C:\Program Files\Fichiers communs\TiVo Shared
    [07/11/2007|09:25] C:\Program Files\Fichiers communs\WindowsLiveInstaller

    --------------------\\ Process

    ( 44 Processes )

    iexplore.exe ~ [PID:2700]

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\else link.exe
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\Rect Great.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\blue audio rule view.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\cssdejsl.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\ficnjcvl.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\jdcldezi.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\kfentesz.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\LoveKnobMpeg.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\lurajccm.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\mgdfhctk.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\mmyfutqt.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\multicastcomp.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\nehbgkbd.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\pkhsymnf.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\qzkrcwwi.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\ssehxhjc.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\tjrdkicx.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\tubvismg.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\whnzufvk.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\wsapuzmt.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\yfexpbyc.exe
    C:\DOCUME~1\Angie\APPLIC~1\manage~1\yynfxohr.exe
    C:\Program Files\manage~1
    C:\Program Files\Circle Developement
    C:\Program Files\Circle Developement\Uninstall.exe
    C:\DOCUME~1\Angie\Cookies\angie@advertstream[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@d2.advertserve[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@monstersandcritics.advertserve[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@www.adserver5[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@adultfriendfinder[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@cover19.adultfriendfinder[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@advertising[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@adex.bigpoint[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@adin.bigpoint[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@bigpoint[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@fr.bigpoint[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@fr.thepimps.bigpoint[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@fr.xblaster.bigpoint[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@fr1.darkorbit.bigpoint[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@fr1.seafight.bigpoint[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@banner.casinoking[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@casinoking[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@banner.cotedazurpalace[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@cotedazurpalace[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@www.cotedazurpalace[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@adopt.euroclick[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@sr2.livemediasrv[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@sr2.livemediasrv[3].txt
    C:\DOCUME~1\Angie\Cookies\angie@pacificpoker[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@partygaming.122.2o7[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@partypoker[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@fr1.seafight.bigpoint[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@32vegas[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@banner.32vegas[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@cachewww.32vegas[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@vegas-millions[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@vegasred[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@www.vegasaffiliates[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@www.vegasred[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@www.lop[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@2xmoinscher[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@cc.2xmoinscher[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@www.2xmoinscher[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@888[1].txt
    C:\WINDOWS\Tasks\B77EBDA393A12D13.job

    --------------------\\ Verification du Registre

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SendHelp"="C:\\DOCUME~1\\Angie\\APPLIC~1\\MANAGE~1\\multicastcomp.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts MODIFIE

    127.0.0.1 bin.errorprotector.com ## added by CiD
    127.0.0.1 br.errorsafe.com ## added by CiD
    127.0.0.1 br.winantivirus.com ## added by CiD
    127.0.0.1 br.winfixer.com ## added by CiD
    127.0.0.1 cdn.drivecleaner.com ## added by CiD
    127.0.0.1 cdn.errorsafe.com ## added by CiD
    127.0.0.1 cdn.winsoftware.com ## added by CiD
    127.0.0.1 de.errorsafe.com ## added by CiD
    127.0.0.1 de.winantivirus.com ## added by CiD
    127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
    127.0.0.1 download.cdn.errorsafe.com ## added by CiD
    127.0.0.1 download.cdn.winsoftware.com ## added by CiD
    127.0.0.1 download.errorsafe.com ## added by CiD
    127.0.0.1 download.systemdoctor.com ## added by CiD
    127.0.0.1 download.winantispyware.com ## added by CiD
    127.0.0.1 download.windrivecleaner.com ## added by CiD
    127.0.0.1 download.winfixer.com ## added by CiD
    127.0.0.1 drivecleaner.com ## added by CiD
    127.0.0.1 dynamique.drivecleaner.com ## added by CiD
    127.0.0.1 errorprotector.com ## added by CiD
    127.0.0.1 errorsafe.com ## added by CiD
    127.0.0.1 es.winantivirus.com ## added by CiD
    127.0.0.1 fr.winantivirus.com ## added by CiD
    127.0.0.1 fr.winfixer.com ## added by CiD
    127.0.0.1 go.drivecleaner.com ## added by CiD
    127.0.0.1 go.errorsafe.com ## added by CiD
    127.0.0.1 go.winantispyware.com ## added by CiD
    127.0.0.1 go.winantivirus.com ## added by CiD
    127.0.0.1 hk.winantivirus.com ## added by CiD
    127.0.0.1 instlog.errorsafe.com ## added by CiD
    127.0.0.1 instlog.winantivirus.com ## added by CiD
    127.0.0.1 instlog.winfixer.com ## added by CiD
    127.0.0.1 jsp.drivecleaner.com ## added by CiD
    127.0.0.1 kb.errorsafe.com ## added by CiD
    127.0.0.1 kb.winantivirus.com ## added by CiD
    127.0.0.1 nl.errorsafe.com ## added by CiD
    127.0.0.1 se.errorsafe.com ## added by CiD
    127.0.0.1 secure.drivecleaner.com ## added by CiD
    127.0.0.1 secure.errorsafe.com ## added by CiD
    127.0.0.1 secure.winantispam.com ## added by CiD
    127.0.0.1 secure.winantispy.com ## added by CiD
    127.0.0.1 secure.winantivirus.com ## added by CiD
    127.0.0.1 support.winantivirus.com ## added by CiD
    127.0.0.1 trial.updates.winsoftware.com ## added by CiD
    127.0.0.1 ulog.winantivirus.com ## added by CiD
    127.0.0.1 utils.errorsafe.com ## added by CiD
    127.0.0.1 utils.winantivirus.com ## added by CiD
    127.0.0.1 utils.winfixer.com ## added by CiD
    127.0.0.1 winantispyware.com ## added by CiD
    127.0.0.1 winantivirus.com ## added by CiD
    127.0.0.1 winfixer.com ## added by CiD
    127.0.0.1 winfixer2006.com ## added by CiD
    127.0.0.1 winsoftware.com ## added by CiD
    127.0.0.1 www.drivecleaner.com ## added by CiD
    127.0.0.1 www.errorprotector.com ## added by CiD
    127.0.0.1 www.errorsafe.com ## added by CiD
    127.0.0.1 www.systemdoctor.com ## added by CiD
    127.0.0.1 www.utils.winfixer.com ## added by CiD
    127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
    127.0.0.1 www.win-virus-pro.com ## added by CiD
    127.0.0.1 www.winantispam.com ## added by CiD
    127.0.0.1 www.winantispy.com ## added by CiD
    127.0.0.1 www.winantispyware.com ## added by CiD
    127.0.0.1 www.winantivirus.com ## added by CiD
    127.0.0.1 www.winantiviruspro.com ## added by CiD
    127.0.0.1 www.windrivecleaner.com ## added by CiD
    127.0.0.1 www.windrivesafe.com ## added by CiD
    127.0.0.1 www.winfixer.com ## added by CiD
    127.0.0.1 www.winfixer2006.com ## added by CiD
    127.0.0.1 www.winsoftware.com ## added by CiD

    -> 72 [ 70 ## added by CiD ]

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-11-11 10:49:48
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 86

    --------------------\\ Recherche d'autres infections

    C:\DOCUME~1\Angie\APPLIC~1\MessengerSkinner
    C:\DOCUME~1\Angie\APPLIC~1\MessengerSkinner\Userdata

    C:\WINDOWS\System32\sgcywaw.dat
    C:\WINDOWS\System32\sgcywaw.exe
    C:\WINDOWS\System32\sgcywaw_navps.dat
    ==> EGDACCESS <==

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\Angie\Local Settings\Temporary Internet Files\Content.IE5\SSC3CKQG\sa7-profs-crack-2476234_1144[1].jpg
    C:\DOCUME~1\Angie\Local Settings\Temporary Internet Files\Content.IE5\Z4BOH95E\keyGen[1].htm


    [F:1255][D:54]-> C:\DOCUME~1\Angie\LOCALS~1\Temp
    [F:3003][D:0]-> C:\DOCUME~1\Angie\Cookies
    [F:32785][D:109]-> C:\DOCUME~1\Angie\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 11/11/2008|10:56 - Option : [1]

    --------------------\\ Fin du rapport a 10:56:25
    Contenus similaires
    11 Novembre 2008 11:24:07

    re

    Etape 1

    Relance Lop S&D

  • Choisis cette fois ci l'Option 2 ( Suppression )
  • Ne ferme pas la fenêtre lors de la suppression !
  • Poste le rapport généré ( C:\lopR.txt )

    Etape 2

    Télécharge Toolbar S&D de la Team IDN sur ton bureau.

  • Double-clique dessus pour lancer l'installation.
  • Accepte le contrat de licence.
  • Puis double-clique sur le raccourci Toolbar S&D présent sur ton bureau.
  • Sélectionne la langue souhaitée et valide par la touche entrée.
  • Choisis l'option 1 ( Recherche ).
  • Patiente jusqu'à la fin du scan.
  • Poste le rapport généré. ( C:\TB.txt )



    Etape 3

    Télécharge Navilog1.exe (IL-MAFIOSO)
    Enregistre-le sur ton Bureau.
    Lance l'installation en double cliquant sur navilog.exe.
    Une fois l'installation terminée, l'utilitaire s'exécutera automatiquement.
    (Si ce n'est pas le cas, double clique sur le raccourci présent sur le Bureau)

    Laisse-toi guider par l'utilitaire. Choisis l'option 1 puis valide.
    [#ff0000]! N'utilise pas l'option 2, 3 et 4 sans notre accord ![/#f]
    Patiente jusqu'à l'apparition de ce message :
    "*** Analyse Termine le ..... ***"
    Appuie sur une touche comme demandé. Le Bloc-notes va s'ouvrir. Poste-nous son contenu de cette manière :

    -> Edition / Sélectionner tout
    -> Edition / Copier
    -> Clique-Droit / Coller dans ta réponse


    NOTE : Le rapport se trouve également ici : C:\fixnavi.txt

    11 Novembre 2008 11:39:04

    re,voila le premier les autres vont suivre.

    --------------------\\ Lop S&D 4.2.4-9c XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3200+ )
    BIOS : Ver 1.00PARTTBL
    USER : Angie ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1169 [VPS 081110-1] 4.8.1169 (Activated)
    C:\ (Local Disk) - NTFS - Total:37 Go (Free:12 Go)
    D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

    "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
    Option : [2] ( 11/11/2008|11:29 )


    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\else link.exe
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\Rect Great.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\blue audio rule view.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\cssdejsl.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\ficnjcvl.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\jdcldezi.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\kfentesz.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\LoveKnobMpeg.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\lurajccm.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\mgdfhctk.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\mmyfutqt.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\multicastcomp.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\nehbgkbd.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\pkhsymnf.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\qzkrcwwi.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\ssehxhjc.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\tjrdkicx.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\tubvismg.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\whnzufvk.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\wsapuzmt.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\yfexpbyc.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\yynfxohr.exe
    Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@advertstream[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@d2.advertserve[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@monstersandcritics.advertserve[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.adserver5[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@adultfriendfinder[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@cover19.adultfriendfinder[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@advertising[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@adex.bigpoint[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@adin.bigpoint[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@bigpoint[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@fr.bigpoint[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@fr.thepimps.bigpoint[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@fr.xblaster.bigpoint[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@fr1.darkorbit.bigpoint[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@fr1.seafight.bigpoint[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@banner.casinoking[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@casinoking[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@banner.cotedazurpalace[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@cotedazurpalace[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.cotedazurpalace[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@adopt.euroclick[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@sr2.livemediasrv[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@sr2.livemediasrv[3].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@pacificpoker[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@partygaming.122.2o7[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@partypoker[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@32vegas[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@banner.32vegas[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@cachewww.32vegas[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@vegas-millions[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@vegasred[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.vegasaffiliates[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.vegasred[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.lop[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@2xmoinscher[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@cc.2xmoinscher[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.2xmoinscher[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@888[1].txt
    Supprime! - C:\WINDOWS\Tasks\B77EBDA393A12D13.job
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1
    Supprime! - C:\Program Files\manage~1
    Supprime! - C:\Program Files\Circle Developement
    -
    [ Fichier Hosts ] .. Restaure!

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


    --------------------\\ Listing des dossiers dans APPLIC~1

    [14/05/2008|14:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [21/03/2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [15/05/2008|12:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
    [17/04/2008|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
    [10/08/2007|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
    [10/11/2008|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA
    [10/08/2007|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpqwmi
    [10/08/2007|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
    [10/11/2008|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
    [13/08/2007|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
    [06/01/2008|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [10/08/2007|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
    [03/10/2008|17:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
    [18/06/2008|11:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
    [05/10/2007|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
    [18/06/2008|11:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
    [10/08/2007|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    [06/01/2008|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
    [22/12/2007|00:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

    [22/03/2008|21:03] C:\DOCUME~1\Angie\APPLIC~1\Adobe
    [23/03/2008|11:32] C:\DOCUME~1\Angie\APPLIC~1\AdobeUM
    [03/10/2008|18:52] C:\DOCUME~1\Angie\APPLIC~1\Angie
    [10/08/2007|12:07] C:\DOCUME~1\Angie\APPLIC~1\Apple Computer
    [19/10/2008|16:21] C:\DOCUME~1\Angie\APPLIC~1\Application Data
    [15/05/2008|20:43] C:\DOCUME~1\Angie\APPLIC~1\Azureus
    [27/10/2008|16:32] C:\DOCUME~1\Angie\APPLIC~1\cs
    [08/07/2008|14:12] C:\DOCUME~1\Angie\APPLIC~1\Documents and Settings
    [17/04/2008|19:33] C:\DOCUME~1\Angie\APPLIC~1\EoRezo
    [10/08/2007|14:32] C:\DOCUME~1\Angie\APPLIC~1\Google
    [22/05/2008|08:12] C:\DOCUME~1\Angie\APPLIC~1\Hotbar
    [22/05/2008|08:12] C:\DOCUME~1\Angie\APPLIC~1\Hotbar_Icons
    [03/06/2008|16:21] C:\DOCUME~1\Angie\APPLIC~1\ICQ
    [18/02/2008|12:19] C:\DOCUME~1\Angie\APPLIC~1\ICQ Toolbar
    [10/08/2007|11:20] C:\DOCUME~1\Angie\APPLIC~1\Identities
    [18/02/2008|12:07] C:\DOCUME~1\Angie\APPLIC~1\InstallShield
    [25/11/2007|00:02] C:\DOCUME~1\Angie\APPLIC~1\InterTrust
    [12/08/2007|21:04] C:\DOCUME~1\Angie\APPLIC~1\InterVideo
    [16/02/2008|13:01] C:\DOCUME~1\Angie\APPLIC~1\ItsLabel
    [15/09/2007|15:26] C:\DOCUME~1\Angie\APPLIC~1\Leadertech
    [09/11/2008|13:45] C:\DOCUME~1\Angie\APPLIC~1\LimeWire
    [06/10/2007|11:44] C:\DOCUME~1\Angie\APPLIC~1\Macromedia
    [17/04/2008|19:22] C:\DOCUME~1\Angie\APPLIC~1\MakeUpPilot
    [10/11/2008|20:03] C:\DOCUME~1\Angie\APPLIC~1\Malwarebytes
    [11/01/2008|22:47] C:\DOCUME~1\Angie\APPLIC~1\MessengerSkinner
    [11/10/2008|18:47] C:\DOCUME~1\Angie\APPLIC~1\Microsoft
    [18/02/2008|12:11] C:\DOCUME~1\Angie\APPLIC~1\Mozilla
    [17/04/2008|19:54] C:\DOCUME~1\Angie\APPLIC~1\MSNInstaller
    [26/08/2008|18:55] C:\DOCUME~1\Angie\APPLIC~1\report
    [26/12/2007|22:26] C:\DOCUME~1\Angie\APPLIC~1\SecuROM
    [11/11/2008|11:28] C:\DOCUME~1\Angie\APPLIC~1\Skype
    [11/11/2008|08:09] C:\DOCUME~1\Angie\APPLIC~1\skypePM
    [22/09/2007|22:19] C:\DOCUME~1\Angie\APPLIC~1\Sonic
    [18/06/2008|11:49] C:\DOCUME~1\Angie\APPLIC~1\Sony Ericsson
    [16/08/2007|10:46] C:\DOCUME~1\Angie\APPLIC~1\Sun
    [10/08/2007|12:50] C:\DOCUME~1\Angie\APPLIC~1\Symantec
    [09/09/2007|10:34] C:\DOCUME~1\Angie\APPLIC~1\SYSTRAN
    [20/06/2008|13:14] C:\DOCUME~1\Angie\APPLIC~1\Teleca
    [22/05/2008|08:12] C:\DOCUME~1\Angie\APPLIC~1\WeatherDPA
    [01/06/2008|08:30] C:\DOCUME~1\Angie\APPLIC~1\Windows Live Writer
    [07/07/2008|19:13] C:\DOCUME~1\Angie\APPLIC~1\WinRAR

    [12/12/2007|22:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [10/08/2007|11:44] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [10/08/2007|11:16] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft



    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [11/11/2008 09:41][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
    [11/11/2008 08:15][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    --------------------\\ Listing des dossiers dans C:\Program Files

    [21/03/2008|20:32] C:\Program Files\Adobe
    [05/10/2007|18:48] C:\Program Files\Alwil Software
    [10/08/2007|11:47] C:\Program Files\AMD
    [10/08/2007|11:56] C:\Program Files\ATI Technologies
    [10/08/2007|11:07] C:\Program Files\ComPlus Applications
    [10/08/2007|11:55] C:\Program Files\CONEXANT
    [10/08/2007|12:04] C:\Program Files\CPQ
    [21/03/2008|20:43] C:\Program Files\Disc2Phone
    [26/12/2007|22:17] C:\Program Files\Electronic Arts
    [03/08/2008|23:19] C:\Program Files\eMule
    [17/04/2008|19:33] C:\Program Files\EoRezo
    [03/10/2008|17:21] C:\Program Files\Fichiers communs
    [10/08/2007|15:20] C:\Program Files\Google
    [10/08/2007|12:05] C:\Program Files\Hewlett-Packard
    [10/08/2007|12:05] C:\Program Files\Hp
    [10/08/2007|12:20] C:\Program Files\HPQ
    [03/06/2008|16:19] C:\Program Files\ICQ6
    [24/06/2008|15:49] C:\Program Files\ICQToolbar
    [10/08/2007|15:45] C:\Program Files\IncrediMail
    [14/05/2008|14:14] C:\Program Files\InstallShield Installation Information
    [17/10/2008|18:12] C:\Program Files\Internet Explorer
    [10/08/2007|12:02] C:\Program Files\InterVideo
    [10/08/2007|12:06] C:\Program Files\iPod
    [10/08/2007|12:06] C:\Program Files\iTunes
    [11/11/2008|07:29] C:\Program Files\Java
    [09/09/2007|10:31] C:\Program Files\Larousse
    [02/08/2008|14:50] C:\Program Files\LimeWire
    [17/04/2008|19:22] C:\Program Files\MakeUp Pilot
    [10/11/2008|20:03] C:\Program Files\Malwarebytes' Anti-Malware
    [11/11/2008|08:08] C:\Program Files\Messenger
    [31/08/2008|19:30] C:\Program Files\Messenger Plus! Live
    [07/11/2007|20:29] C:\Program Files\Microsoft CAPICOM 2.1.0.2
    [10/08/2007|11:12] C:\Program Files\microsoft frontpage
    [26/10/2007|20:34] C:\Program Files\Microsoft Office
    [07/11/2007|09:33] C:\Program Files\Microsoft SQL Server Compact Edition
    [11/11/2008|08:01] C:\Program Files\Movie Maker
    [26/10/2007|20:33] C:\Program Files\MSECache
    [17/04/2008|19:52] C:\Program Files\MSN
    [10/08/2007|11:06] C:\Program Files\MSN Gaming Zone
    [20/10/2007|23:00] C:\Program Files\MSXML 4.0
    [11/11/2008|07:52] C:\Program Files\NetMeeting
    [10/08/2007|11:06] C:\Program Files\Online Services
    [11/11/2008|07:52] C:\Program Files\Outlook Express
    [24/03/2008|16:58] C:\Program Files\PhotoFiltre
    [16/02/2008|13:08] C:\Program Files\PhotoFiltre Studio
    [01/09/2007|10:15] C:\Program Files\QuickTime
    [10/08/2007|12:42] C:\Program Files\SAGEM
    [10/08/2007|11:25] C:\Program Files\Securitoo
    [10/08/2007|11:09] C:\Program Files\Services en ligne
    [03/10/2008|17:21] C:\Program Files\Skype
    [10/08/2007|12:17] C:\Program Files\Sonic
    [18/06/2008|11:48] C:\Program Files\Sony Ericsson
    [03/06/2008|18:40] C:\Program Files\Soulseek-Test
    [22/04/2008|17:57] C:\Program Files\Sun
    [10/08/2007|12:08] C:\Program Files\Synaptics
    [09/09/2007|10:24] C:\Program Files\SYSTRAN
    [11/11/2008|08:35] C:\Program Files\Trend Micro
    [10/08/2007|11:20] C:\Program Files\Uninstall Information
    [14/05/2008|14:14] C:\Program Files\Vimicro
    [20/09/2008|17:46] C:\Program Files\Western Digital
    [20/09/2008|17:28] C:\Program Files\Western Digital Technologies
    [24/11/2007|23:49] C:\Program Files\WIDCOMM
    [27/02/2008|21:39] C:\Program Files\Windows Live
    [06/01/2008|15:02] C:\Program Files\Windows Live Favorites
    [06/01/2008|15:02] C:\Program Files\Windows Live Toolbar
    [13/06/2008|07:49] C:\Program Files\Windows Media Connect 2
    [11/11/2008|07:52] C:\Program Files\Windows Media Player
    [11/11/2008|07:52] C:\Program Files\Windows NT
    [10/08/2007|11:09] C:\Program Files\WindowsUpdate
    [10/08/2007|11:12] C:\Program Files\xerox
    [21/12/2007|23:57] C:\Program Files\Yahoo!

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [25/11/2007|00:02] C:\Program Files\Fichiers communs\Adobe
    [10/08/2007|12:42] C:\Program Files\Fichiers communs\InstallShield
    [22/04/2008|17:54] C:\Program Files\Fichiers communs\Java
    [06/01/2008|15:00] C:\Program Files\Fichiers communs\Microsoft Shared
    [10/08/2007|11:08] C:\Program Files\Fichiers communs\MSSoap
    [10/08/2007|12:59] C:\Program Files\Fichiers communs\ODBC
    [10/08/2007|11:08] C:\Program Files\Fichiers communs\Services
    [03/10/2008|17:21] C:\Program Files\Fichiers communs\Skype
    [07/09/2007|21:05] C:\Program Files\Fichiers communs\snpstd3
    [10/08/2007|12:16] C:\Program Files\Fichiers communs\Sonic Shared
    [18/06/2008|11:49] C:\Program Files\Fichiers communs\Sony Ericsson Shared
    [10/08/2007|12:59] C:\Program Files\Fichiers communs\SpeechEngines
    [10/08/2007|12:16] C:\Program Files\Fichiers communs\SureThing Shared
    [05/10/2007|21:15] C:\Program Files\Fichiers communs\Symantec Shared
    [11/11/2008|07:52] C:\Program Files\Fichiers communs\System
    [18/06/2008|11:51] C:\Program Files\Fichiers communs\Teleca Shared
    [10/08/2007|12:17] C:\Program Files\Fichiers communs\TiVo Shared
    [07/11/2007|09:25] C:\Program Files\Fichiers communs\WindowsLiveInstaller

    --------------------\\ Process

    ( 43 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE


    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-11-11 11:30:59
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 86

    --------------------\\ Recherche d'autres infections

    C:\DOCUME~1\Angie\APPLIC~1\MessengerSkinner
    C:\DOCUME~1\Angie\APPLIC~1\MessengerSkinner\Userdata

    C:\WINDOWS\System32\sgcywaw.dat
    C:\WINDOWS\System32\sgcywaw.exe
    C:\WINDOWS\System32\sgcywaw_navps.dat
    ==> EGDACCESS <==

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\Angie\Local Settings\Temporary Internet Files\Content.IE5\SSC3CKQG\sa7-profs-crack-2476234_1144[1].jpg
    C:\DOCUME~1\Angie\Local Settings\Temporary Internet Files\Content.IE5\Z4BOH95E\keyGen[1].htm


    [F:1255][D:54]-> C:\DOCUME~1\Angie\LOCALS~1\Temp
    [F:2965][D:0]-> C:\DOCUME~1\Angie\Cookies
    [F:32851][D:109]-> C:\DOCUME~1\Angie\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 11/11/2008|10:56 - Option : [1]
    2 - "C:\Lop SD\LopR_2.txt" - 11/11/2008|11:35 - Option : [2]

    --------------------\\ Fin du rapport a 11:35:26
    11 Novembre 2008 11:44:04

    voici le rapport toolbar.

    --------------------\\ Lop S&D 4.2.4-9c XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3200+ )
    BIOS : Ver 1.00PARTTBL
    USER : Angie ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1169 [VPS 081110-1] 4.8.1169 (Activated)
    C:\ (Local Disk) - NTFS - Total:37 Go (Free:12 Go)
    D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

    "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
    Option : [2] ( 11/11/2008|11:29 )


    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\else link.exe
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\Rect Great.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\blue audio rule view.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\cssdejsl.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\ficnjcvl.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\jdcldezi.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\kfentesz.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\LoveKnobMpeg.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\lurajccm.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\mgdfhctk.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\mmyfutqt.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\multicastcomp.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\nehbgkbd.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\pkhsymnf.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\qzkrcwwi.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\ssehxhjc.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\tjrdkicx.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\tubvismg.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\whnzufvk.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\wsapuzmt.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\yfexpbyc.exe
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1\yynfxohr.exe
    Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@advertstream[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@d2.advertserve[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@monstersandcritics.advertserve[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.adserver5[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@adultfriendfinder[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@cover19.adultfriendfinder[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@advertising[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@adex.bigpoint[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@adin.bigpoint[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@bigpoint[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@fr.bigpoint[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@fr.thepimps.bigpoint[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@fr.xblaster.bigpoint[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@fr1.darkorbit.bigpoint[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@fr1.seafight.bigpoint[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@banner.casinoking[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@casinoking[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@banner.cotedazurpalace[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@cotedazurpalace[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.cotedazurpalace[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@adopt.euroclick[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@sr2.livemediasrv[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@sr2.livemediasrv[3].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@pacificpoker[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@partygaming.122.2o7[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@partypoker[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@32vegas[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@banner.32vegas[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@cachewww.32vegas[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@vegas-millions[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@vegasred[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.vegasaffiliates[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.vegasred[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.lop[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@2xmoinscher[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@cc.2xmoinscher[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.2xmoinscher[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@888[1].txt
    Supprime! - C:\WINDOWS\Tasks\B77EBDA393A12D13.job
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\manage~1
    Supprime! - C:\Program Files\manage~1
    Supprime! - C:\Program Files\Circle Developement
    -
    [ Fichier Hosts ] .. Restaure!

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


    --------------------\\ Listing des dossiers dans APPLIC~1

    [14/05/2008|14:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [21/03/2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [15/05/2008|12:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
    [17/04/2008|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
    [10/08/2007|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
    [10/11/2008|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA
    [10/08/2007|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpqwmi
    [10/08/2007|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
    [10/11/2008|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
    [13/08/2007|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
    [06/01/2008|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [10/08/2007|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
    [03/10/2008|17:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
    [18/06/2008|11:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
    [05/10/2007|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
    [18/06/2008|11:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
    [10/08/2007|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    [06/01/2008|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
    [22/12/2007|00:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

    [22/03/2008|21:03] C:\DOCUME~1\Angie\APPLIC~1\Adobe
    [23/03/2008|11:32] C:\DOCUME~1\Angie\APPLIC~1\AdobeUM
    [03/10/2008|18:52] C:\DOCUME~1\Angie\APPLIC~1\Angie
    [10/08/2007|12:07] C:\DOCUME~1\Angie\APPLIC~1\Apple Computer
    [19/10/2008|16:21] C:\DOCUME~1\Angie\APPLIC~1\Application Data
    [15/05/2008|20:43] C:\DOCUME~1\Angie\APPLIC~1\Azureus
    [27/10/2008|16:32] C:\DOCUME~1\Angie\APPLIC~1\cs
    [08/07/2008|14:12] C:\DOCUME~1\Angie\APPLIC~1\Documents and Settings
    [17/04/2008|19:33] C:\DOCUME~1\Angie\APPLIC~1\EoRezo
    [10/08/2007|14:32] C:\DOCUME~1\Angie\APPLIC~1\Google
    [22/05/2008|08:12] C:\DOCUME~1\Angie\APPLIC~1\Hotbar
    [22/05/2008|08:12] C:\DOCUME~1\Angie\APPLIC~1\Hotbar_Icons
    [03/06/2008|16:21] C:\DOCUME~1\Angie\APPLIC~1\ICQ
    [18/02/2008|12:19] C:\DOCUME~1\Angie\APPLIC~1\ICQ Toolbar
    [10/08/2007|11:20] C:\DOCUME~1\Angie\APPLIC~1\Identities
    [18/02/2008|12:07] C:\DOCUME~1\Angie\APPLIC~1\InstallShield
    [25/11/2007|00:02] C:\DOCUME~1\Angie\APPLIC~1\InterTrust
    [12/08/2007|21:04] C:\DOCUME~1\Angie\APPLIC~1\InterVideo
    [16/02/2008|13:01] C:\DOCUME~1\Angie\APPLIC~1\ItsLabel
    [15/09/2007|15:26] C:\DOCUME~1\Angie\APPLIC~1\Leadertech
    [09/11/2008|13:45] C:\DOCUME~1\Angie\APPLIC~1\LimeWire
    [06/10/2007|11:44] C:\DOCUME~1\Angie\APPLIC~1\Macromedia
    [17/04/2008|19:22] C:\DOCUME~1\Angie\APPLIC~1\MakeUpPilot
    [10/11/2008|20:03] C:\DOCUME~1\Angie\APPLIC~1\Malwarebytes
    [11/01/2008|22:47] C:\DOCUME~1\Angie\APPLIC~1\MessengerSkinner
    [11/10/2008|18:47] C:\DOCUME~1\Angie\APPLIC~1\Microsoft
    [18/02/2008|12:11] C:\DOCUME~1\Angie\APPLIC~1\Mozilla
    [17/04/2008|19:54] C:\DOCUME~1\Angie\APPLIC~1\MSNInstaller
    [26/08/2008|18:55] C:\DOCUME~1\Angie\APPLIC~1\report
    [26/12/2007|22:26] C:\DOCUME~1\Angie\APPLIC~1\SecuROM
    [11/11/2008|11:28] C:\DOCUME~1\Angie\APPLIC~1\Skype
    [11/11/2008|08:09] C:\DOCUME~1\Angie\APPLIC~1\skypePM
    [22/09/2007|22:19] C:\DOCUME~1\Angie\APPLIC~1\Sonic
    [18/06/2008|11:49] C:\DOCUME~1\Angie\APPLIC~1\Sony Ericsson
    [16/08/2007|10:46] C:\DOCUME~1\Angie\APPLIC~1\Sun
    [10/08/2007|12:50] C:\DOCUME~1\Angie\APPLIC~1\Symantec
    [09/09/2007|10:34] C:\DOCUME~1\Angie\APPLIC~1\SYSTRAN
    [20/06/2008|13:14] C:\DOCUME~1\Angie\APPLIC~1\Teleca
    [22/05/2008|08:12] C:\DOCUME~1\Angie\APPLIC~1\WeatherDPA
    [01/06/2008|08:30] C:\DOCUME~1\Angie\APPLIC~1\Windows Live Writer
    [07/07/2008|19:13] C:\DOCUME~1\Angie\APPLIC~1\WinRAR

    [12/12/2007|22:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [10/08/2007|11:44] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [10/08/2007|11:16] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft



    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [11/11/2008 09:41][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
    [11/11/2008 08:15][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    --------------------\\ Listing des dossiers dans C:\Program Files

    [21/03/2008|20:32] C:\Program Files\Adobe
    [05/10/2007|18:48] C:\Program Files\Alwil Software
    [10/08/2007|11:47] C:\Program Files\AMD
    [10/08/2007|11:56] C:\Program Files\ATI Technologies
    [10/08/2007|11:07] C:\Program Files\ComPlus Applications
    [10/08/2007|11:55] C:\Program Files\CONEXANT
    [10/08/2007|12:04] C:\Program Files\CPQ
    [21/03/2008|20:43] C:\Program Files\Disc2Phone
    [26/12/2007|22:17] C:\Program Files\Electronic Arts
    [03/08/2008|23:19] C:\Program Files\eMule
    [17/04/2008|19:33] C:\Program Files\EoRezo
    [03/10/2008|17:21] C:\Program Files\Fichiers communs
    [10/08/2007|15:20] C:\Program Files\Google
    [10/08/2007|12:05] C:\Program Files\Hewlett-Packard
    [10/08/2007|12:05] C:\Program Files\Hp
    [10/08/2007|12:20] C:\Program Files\HPQ
    [03/06/2008|16:19] C:\Program Files\ICQ6
    [24/06/2008|15:49] C:\Program Files\ICQToolbar
    [10/08/2007|15:45] C:\Program Files\IncrediMail
    [14/05/2008|14:14] C:\Program Files\InstallShield Installation Information
    [17/10/2008|18:12] C:\Program Files\Internet Explorer
    [10/08/2007|12:02] C:\Program Files\InterVideo
    [10/08/2007|12:06] C:\Program Files\iPod
    [10/08/2007|12:06] C:\Program Files\iTunes
    [11/11/2008|07:29] C:\Program Files\Java
    [09/09/2007|10:31] C:\Program Files\Larousse
    [02/08/2008|14:50] C:\Program Files\LimeWire
    [17/04/2008|19:22] C:\Program Files\MakeUp Pilot
    [10/11/2008|20:03] C:\Program Files\Malwarebytes' Anti-Malware
    [11/11/2008|08:08] C:\Program Files\Messenger
    [31/08/2008|19:30] C:\Program Files\Messenger Plus! Live
    [07/11/2007|20:29] C:\Program Files\Microsoft CAPICOM 2.1.0.2
    [10/08/2007|11:12] C:\Program Files\microsoft frontpage
    [26/10/2007|20:34] C:\Program Files\Microsoft Office
    [07/11/2007|09:33] C:\Program Files\Microsoft SQL Server Compact Edition
    [11/11/2008|08:01] C:\Program Files\Movie Maker
    [26/10/2007|20:33] C:\Program Files\MSECache
    [17/04/2008|19:52] C:\Program Files\MSN
    [10/08/2007|11:06] C:\Program Files\MSN Gaming Zone
    [20/10/2007|23:00] C:\Program Files\MSXML 4.0
    [11/11/2008|07:52] C:\Program Files\NetMeeting
    [10/08/2007|11:06] C:\Program Files\Online Services
    [11/11/2008|07:52] C:\Program Files\Outlook Express
    [24/03/2008|16:58] C:\Program Files\PhotoFiltre
    [16/02/2008|13:08] C:\Program Files\PhotoFiltre Studio
    [01/09/2007|10:15] C:\Program Files\QuickTime
    [10/08/2007|12:42] C:\Program Files\SAGEM
    [10/08/2007|11:25] C:\Program Files\Securitoo
    [10/08/2007|11:09] C:\Program Files\Services en ligne
    [03/10/2008|17:21] C:\Program Files\Skype
    [10/08/2007|12:17] C:\Program Files\Sonic
    [18/06/2008|11:48] C:\Program Files\Sony Ericsson
    [03/06/2008|18:40] C:\Program Files\Soulseek-Test
    [22/04/2008|17:57] C:\Program Files\Sun
    [10/08/2007|12:08] C:\Program Files\Synaptics
    [09/09/2007|10:24] C:\Program Files\SYSTRAN
    [11/11/2008|08:35] C:\Program Files\Trend Micro
    [10/08/2007|11:20] C:\Program Files\Uninstall Information
    [14/05/2008|14:14] C:\Program Files\Vimicro
    [20/09/2008|17:46] C:\Program Files\Western Digital
    [20/09/2008|17:28] C:\Program Files\Western Digital Technologies
    [24/11/2007|23:49] C:\Program Files\WIDCOMM
    [27/02/2008|21:39] C:\Program Files\Windows Live
    [06/01/2008|15:02] C:\Program Files\Windows Live Favorites
    [06/01/2008|15:02] C:\Program Files\Windows Live Toolbar
    [13/06/2008|07:49] C:\Program Files\Windows Media Connect 2
    [11/11/2008|07:52] C:\Program Files\Windows Media Player
    [11/11/2008|07:52] C:\Program Files\Windows NT
    [10/08/2007|11:09] C:\Program Files\WindowsUpdate
    [10/08/2007|11:12] C:\Program Files\xerox
    [21/12/2007|23:57] C:\Program Files\Yahoo!

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [25/11/2007|00:02] C:\Program Files\Fichiers communs\Adobe
    [10/08/2007|12:42] C:\Program Files\Fichiers communs\InstallShield
    [22/04/2008|17:54] C:\Program Files\Fichiers communs\Java
    [06/01/2008|15:00] C:\Program Files\Fichiers communs\Microsoft Shared
    [10/08/2007|11:08] C:\Program Files\Fichiers communs\MSSoap
    [10/08/2007|12:59] C:\Program Files\Fichiers communs\ODBC
    [10/08/2007|11:08] C:\Program Files\Fichiers communs\Services
    [03/10/2008|17:21] C:\Program Files\Fichiers communs\Skype
    [07/09/2007|21:05] C:\Program Files\Fichiers communs\snpstd3
    [10/08/2007|12:16] C:\Program Files\Fichiers communs\Sonic Shared
    [18/06/2008|11:49] C:\Program Files\Fichiers communs\Sony Ericsson Shared
    [10/08/2007|12:59] C:\Program Files\Fichiers communs\SpeechEngines
    [10/08/2007|12:16] C:\Program Files\Fichiers communs\SureThing Shared
    [05/10/2007|21:15] C:\Program Files\Fichiers communs\Symantec Shared
    [11/11/2008|07:52] C:\Program Files\Fichiers communs\System
    [18/06/2008|11:51] C:\Program Files\Fichiers communs\Teleca Shared
    [10/08/2007|12:17] C:\Program Files\Fichiers communs\TiVo Shared
    [07/11/2007|09:25] C:\Program Files\Fichiers communs\WindowsLiveInstaller

    --------------------\\ Process

    ( 43 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE


    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-11-11 11:30:59
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 86

    --------------------\\ Recherche d'autres infections

    C:\DOCUME~1\Angie\APPLIC~1\MessengerSkinner
    C:\DOCUME~1\Angie\APPLIC~1\MessengerSkinner\Userdata

    C:\WINDOWS\System32\sgcywaw.dat
    C:\WINDOWS\System32\sgcywaw.exe
    C:\WINDOWS\System32\sgcywaw_navps.dat
    ==> EGDACCESS <==

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\Angie\Local Settings\Temporary Internet Files\Content.IE5\SSC3CKQG\sa7-profs-crack-2476234_1144[1].jpg
    C:\DOCUME~1\Angie\Local Settings\Temporary Internet Files\Content.IE5\Z4BOH95E\keyGen[1].htm


    [F:1255][D:54]-> C:\DOCUME~1\Angie\LOCALS~1\Temp
    [F:2965][D:0]-> C:\DOCUME~1\Angie\Cookies
    [F:32851][D:109]-> C:\DOCUME~1\Angie\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 11/11/2008|10:56 - Option : [1]
    2 - "C:\Lop SD\LopR_2.txt" - 11/11/2008|11:35 - Option : [2]

    --------------------\\ Fin du rapport a 11:35:26
    11 Novembre 2008 12:18:41

    et vola le dernier .
    Search Navipromo version 3.6.9 commencé le 11/11/2008 à 11:47:39,07

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!
    !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

    Outil exécuté depuis C:\Program Files\navilog1
    Session actuelle : "Angie"

    Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO


    Microsoft Windows XP [version 5.1.2600]
    Internet Explorer : 7.0.5730.11
    Système de fichiers : NTFS

    Recherche executé en mode normal

    *** Recherche Programmes installés ***


    *** Recherche dossiers dans "C:\WINDOWS" ***


    *** Recherche dossiers dans "C:\Program Files" ***


    *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


    *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\Angie\applic~1" ***

    ...\MessengerSkinner trouvé !

    *** Recherche dossiers dans "C:\Documents and Settings\Angie\locals~1\applic~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\Angie\menudm~1\progra~1" ***


    *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
    pour + d'infos : http://www.gmer.net

    Fichier(s) caché(s) :

    C:\WINDOWS\system32\sgcywaw.dat
    C:\WINDOWS\system32\sgcywaw.exe
    C:\WINDOWS\system32\sgcywaw_navps.dat


    *** Recherche avec GenericNaviSearch ***
    !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
    !!! A vérifier impérativement avant toute suppression manuelle !!!

    * Recherche dans "C:\WINDOWS\system32" *

    Fichiers trouvés :

    aetflty.exe trouvé !
    bnxovryq.exe trouvé !
    drxjej.exe trouvé !
    edheeylbk.exe trouvé !
    fnnpbnv.exe trouvé !
    gksyvw.exe trouvé !
    jrevtkpai.exe trouvé !
    juranxvf.exe trouvé !
    nywagb.exe trouvé !
    nywagb.dat trouvé !
    ofjoblgag.exe trouvé !
    rpougcpde.exe trouvé !
    sfdihqgtwv.exe trouvé !
    smtvuiat.exe trouvé !
    theixxnm.exe trouvé !
    tytalbxdke.exe trouvé !
    vnjxqpsj.exe trouvé !
    vrhnpg.exe trouvé !
    witdpicxe.exe trouvé !
    wnqfksr.exe trouvé !
    wopaxo.exe trouvé !
    wqdsnbcz.exe trouvé !
    xbgfka.exe trouvé !
    zuclikge.exe trouvé !

    Fichiers suspects :

    gksyvw.exe trouvé !
    jrevtkpai.exe trouvé !
    nywagb.exe trouvé !
    nywagb.dat trouvé !
    ofjoblgag.exe trouvé !
    smjnzal.exe trouvé !
    smtvuiat.exe trouvé !
    theixxnm.exe trouvé !
    veopbzlow.exe trouvé !
    wopaxo.exe trouvé !
    wqdsnbcz.exe trouvé !

    * Recherche dans "C:\Documents and Settings\Angie\locals~1\applic~1" *



    *** Recherche fichiers ***



    *** Recherche clés spécifiques dans le Registre ***

    HKEY_CURRENT_USER\Software\Lanconfig trouvé !

    *** Module de Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Recherche nouveaux fichiers Instant Access :


    2)Recherche Heuristique :

    * Dans "C:\WINDOWS\system32" :

    nywagb.exe trouvé !
    nywagb.dat trouvé !

    * Dans "C:\Documents and Settings\Angie\locals~1\applic~1" :


    3)Recherche Certificats :

    Certificat Egroup trouvé !
    Certificat Electronic-Group trouvé !
    Certificat Montorgueil absent !
    Certificat OOO-Favorit trouvé !
    Certificat Sunny-Day-Design-Ltd absent !

    4)Recherche fichiers connus :



    *** Analyse terminée le 11/11/2008 à 12:15:21,79 ***
    11 Novembre 2008 15:50:26

    j'ai peut être fait une bétise , d'envoyer les rapports en trois fois......!
    désolée si s'en était le cas et dite moi si je doit recommencer.
    11 Novembre 2008 18:05:06

    re
    Citation :
    'ai peut être fait une bétise , d'envoyer les rapports en trois fois......!
    désolée si s'en était le cas et dite moi si je doit recommencer.

    nan, je te demande les 3 pour te faire gagner du temps et qu'on désinfecte plus vite. :) 
    par contre, tu m'a envoyer deux fois le rapport LOP, tu as donc oublié de faire l'étape 2. Donc on poursuit comme suit:

    1


    Double clique sur le raccourci de Navilog1 présent sur ton Bureau.
    Suis les instructions. Choisis ensuite l'option 2 puis valide.
    Laisse toi guider et réponds aux questions éventuelles.

    L'utilitaire va t'informer qu'il va redémarrer l'ordinateur.
    **Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts**[/#f]
    Appuie maintenant sur une touche, comme demandé.
    (si ton PC ne redémarre pas automatiquement, fais-le manuellement)

    Patiente jusqu'à l'apparition de ce message :
    "*** Nettoyage Termine le ..... ***"

    Le Bloc-notes va s'ouvrir.
    Sauvegarde le rapport de manière à le retrouver.
    Referme le Bloc-notes. Ton bureau va maintenant réapparaître.

    NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
    Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
    Tape explorer puis valide.

    Poste le rapport sauvegardé auparavant (C:\cleannavi.txt)


    Ferme Internet Explorer puis Démarrer/Panneau de Configuration/Options Internet.
    Choisis l'onglet Contenu puis onglet Certificats.
    Si tu trouves les programmes suivant (en particulier dans Editeurs approuvés), Dis-le moi :

    VIP


    2

    Télécharge Toolbar S&D de la [#0055aa]Team IDN
    sur ton bureau.

  • Double-clique dessus pour lancer l'installation.
  • Accepte le contrat de licence.
  • Puis double-clique sur le raccourci Toolbar S&D présent sur ton bureau.
  • Sélectionne la langue souhaitée et valide par la touche entrée.
  • Choisis l'option 1 ( Recherche ).
  • Patiente jusqu'à la fin du scan.
  • Poste le rapport généré. ( C:\TB.txt )


    11 Novembre 2008 18:36:18

    re ? voila le rapport
    Clean Navipromo version 3.6.9 commencé le 11/11/2008 à 18:10:53,09

    Outil exécuté depuis C:\Program Files\navilog1
    Session actuelle : "Angie"

    Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO


    Microsoft Windows XP [version 5.1.2600]
    Internet Explorer : 7.0.5730.11
    Système de fichiers : NTFS

    Mode suppression automatique
    avec prise en charge résultats Catchme et GNS


    Nettoyage exécuté au redémarrage de l'ordinateur

    *** Creation backups fichiers trouvés par Catchme ***

    Copie vers "C:\Program Files\navilog1\Backupnavi"


    *** Suppression des fichiers trouvés avec Catchme ***


    ** 2ème passage avec résultats Catchme **

    * Dans "C:\WINDOWS\system32" *


    C:\WINDOWS\prefetch\sgcywaw*.pf trouvé !
    Copie C:\WINDOWS\prefetch\sgcywaw*.pf réalisée avec succès !
    C:\WINDOWS\prefetch\sgcywaw*.pf supprimé !


    * Dans "C:\Documents and Settings\Angie\locals~1\applic~1" *



    *** Suppression avec sauvegardes résultats GenericNaviSearch ***

    * Suppression dans "C:\WINDOWS\System32" *


    aetflty.exe trouvé !
    Copie aetflty.exe réalisée avec succès !
    aetflty.exe supprimé !

    bnxovryq.exe trouvé !
    Copie bnxovryq.exe réalisée avec succès !
    bnxovryq.exe supprimé !

    drxjej.exe trouvé !
    Copie drxjej.exe réalisée avec succès !
    drxjej.exe supprimé !

    edheeylbk.exe trouvé !
    Copie edheeylbk.exe réalisée avec succès !
    edheeylbk.exe supprimé !

    fnnpbnv.exe trouvé !
    Copie fnnpbnv.exe réalisée avec succès !
    fnnpbnv.exe supprimé !

    gksyvw.exe trouvé !
    Copie gksyvw.exe réalisée avec succès !
    gksyvw.exe supprimé !

    jrevtkpai.exe trouvé !
    Copie jrevtkpai.exe réalisée avec succès !
    jrevtkpai.exe supprimé !

    juranxvf.exe trouvé !
    Copie juranxvf.exe réalisée avec succès !
    juranxvf.exe supprimé !

    nywagb.exe trouvé !
    Copie nywagb.exe réalisée avec succès !
    nywagb.exe supprimé !

    nywagb.dat trouvé !
    Copie nywagb.dat réalisée avec succès !
    nywagb.dat supprimé !

    ofjoblgag.exe trouvé !
    Copie ofjoblgag.exe réalisée avec succès !
    ofjoblgag.exe supprimé !

    rpougcpde.exe trouvé !
    Copie rpougcpde.exe réalisée avec succès !
    rpougcpde.exe supprimé !

    sfdihqgtwv.exe trouvé !
    Copie sfdihqgtwv.exe réalisée avec succès !
    sfdihqgtwv.exe supprimé !

    smtvuiat.exe trouvé !
    Copie smtvuiat.exe réalisée avec succès !
    smtvuiat.exe supprimé !

    theixxnm.exe trouvé !
    Copie theixxnm.exe réalisée avec succès !
    theixxnm.exe supprimé !

    tytalbxdke.exe trouvé !
    Copie tytalbxdke.exe réalisée avec succès !
    tytalbxdke.exe supprimé !

    vnjxqpsj.exe trouvé !
    Copie vnjxqpsj.exe réalisée avec succès !
    vnjxqpsj.exe supprimé !

    vrhnpg.exe trouvé !
    Copie vrhnpg.exe réalisée avec succès !
    vrhnpg.exe supprimé !

    witdpicxe.exe trouvé !
    Copie witdpicxe.exe réalisée avec succès !
    witdpicxe.exe supprimé !

    wnqfksr.exe trouvé !
    Copie wnqfksr.exe réalisée avec succès !
    wnqfksr.exe supprimé !

    wopaxo.exe trouvé !
    Copie wopaxo.exe réalisée avec succès !
    wopaxo.exe supprimé !

    wqdsnbcz.exe trouvé !
    Copie wqdsnbcz.exe réalisée avec succès !
    wqdsnbcz.exe supprimé !

    xbgfka.exe trouvé !
    Copie xbgfka.exe réalisée avec succès !
    xbgfka.exe supprimé !

    zuclikge.exe trouvé !
    Copie zuclikge.exe réalisée avec succès !
    zuclikge.exe supprimé !

    Autres Suppressions :



    * Suppression dans "C:\Documents and Settings\Angie\locals~1\applic~1" *




    *** Suppression dossiers dans "C:\WINDOWS" ***


    *** Suppression dossiers dans "C:\Program Files" ***


    *** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


    *** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\Angie\applic~1" ***

    ...\MessengerSkinner ...suppression...
    ...\MessengerSkinner supprimé !


    *** Suppression dossiers dans "C:\Documents and Settings\Angie\locals~1\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\Angie\menudm~1\progra~1" ***



    *** Suppression fichiers ***


    *** Suppression fichiers temporaires ***

    Nettoyage contenu C:\WINDOWS\Temp effectué !
    Nettoyage contenu C:\Documents and Settings\Angie\locals~1\Temp effectué !

    *** Traitement Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

    2)Recherche, création sauvegardes et suppression Heuristique :


    * Dans "C:\WINDOWS\system32" *


    wyema.exe trouvé !
    Copie wyema.exe réalisée avec succès !
    wyema.exe supprimé !

    wyema.dat trouvé !
    Copie wyema.dat réalisée avec succès !
    wyema.dat supprimé !

    wyema_navps.dat trouvé !
    Copie wyema_navps.dat réalisée avec succès !
    wyema_navps.dat supprimé !

    C:\WINDOWS\prefetch\wyema*.pf trouvé !
    Copie C:\WINDOWS\prefetch\wyema*.pf réalisée avec succès !
    C:\WINDOWS\prefetch\wyema*.pf supprimé !


    * Dans "C:\Documents and Settings\Angie\locals~1\applic~1" *


    *** Sauvegarde du Registre vers dossier Safebackup ***

    sauvegarde du Registre réalisée avec succès !

    *** Nettoyage Registre ***

    Nettoyage Registre Ok


    *** Certificats ***

    Certificat Egroup supprimé !
    Certificat Electronic-Group supprimé !
    Certificat Montorgueil absent !
    Certificat OOO-Favorit supprimé !
    Certificat Sunny-Day-Design-Ltdt absent !

    *** Fichiers suspects non supprimés par Navilog1 ***
    !! Fichiers légitimes possibles, à contrôler avant suppression !!

    Fichiers suspects dans "C:\WINDOWS\system32" :

    smjnzal.exe trouvé !
    veopbzlow.exe trouvé !
    veopbzlow.exe trouvé !

    *** Nettoyage terminé le 11/11/2008 à 18:29:43,25 ***

    11 Novembre 2008 18:43:13

    voila j'espere que c'est le bon.

    -----------\\ ToolBar S&D 1.2.4 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3200+ )
    BIOS : Ver 1.00PARTTBL
    USER : Angie ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1169 [VPS 081111-0] 4.8.1169 (Activated)
    C:\ (Local Disk) - NTFS - Total:37 Go (Free:13 Go)
    D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

    "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
    Option : [1] ( 11/11/2008|18:37 )

    -----------\\ Recherche de Fichiers / Dossiers ...

    C:\DOCUME~1\Angie\Cookies\angie@bananalotto[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@www.bananalotto[2].txt
    C:\DOCUME~1\Angie\Favoris\http--www.dailymotion.com-playlist-xhcj4_gerbignio_la-chanson...
    C:\DOCUME~1\Angie\APPLIC~1\Hotbar
    C:\DOCUME~1\Angie\APPLIC~1\Hotbar\IESkins
    C:\DOCUME~1\Angie\APPLIC~1\Hotbar\v3.0
    C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Hotbar
    C:\DOCUME~1\Angie\Cookies\angie@contentcatalog.hotbar[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@hotbar[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@www.hotbar[2].txt
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSA.dat
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSAAbout.mht
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSAau.dat
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSAEula.mht
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSA_kyf.dat
    C:\DOCUME~1\Angie\Cookies\angie@mywaytoperfection.blog4ever[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@cs.shopperreports[1].txt
    C:\DOCUME~1\Angie\Cookies\angie@h.starware[2].txt
    C:\DOCUME~1\Angie\Cookies\angie@try.starware[1].txt
    C:\DOCUME~1\Angie\APPLIC~1\WeatherDPA
    C:\DOCUME~1\Angie\APPLIC~1\WeatherDPA\Weather
    C:\DOCUME~1\Angie\Cookies\angie@frzango.easyrencontre[1].txt

    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    "Start Page"="http://www.orange.fr/"
    "Search Bar"="http://www.google.com/ie"
    "ICQ Search"="http://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
    "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
    "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
    "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"


    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\Angie\Local Settings\Temporary Internet Files\Content.IE5\SSC3CKQG\sa7-profs-crack-2476234_1144[1].jpg
    C:\DOCUME~1\Angie\Local Settings\Temporary Internet Files\Content.IE5\Z4BOH95E\keyGen[1].htm



    1 - "C:\ToolBar SD\TB_1.txt" - 11/11/2008|11:42 - Option : [1]
    2 - "C:\ToolBar SD\TB_2.txt" - 11/11/2008|18:41 - Option : [1]

    -----------\\ Fin du rapport a 18:41:23,20

    11 Novembre 2008 19:03:15

    il n'y a pas VIP dans les éditeurs approuvés
    12 Novembre 2008 09:42:36

    Bonjour Sham_Rock
    j'ai des mise a jour windows à instaler ça n'a pas incidence sur le netoyage
    que tu ma fait faire .car j'ai peur de faire une bétise.
    Merci encore pour ton aide
    12 Novembre 2008 13:27:39

    Bonjour , je sais bien que vous avez une vie pendant vos dépannages ,
    comment ça se passe . je suppose que c'est toujours la même personne qui s'occupe du départ de l'aide ou je dois refaire un sujet si toutefois ça ne repond plus .
    Merci d'avance
    12 Novembre 2008 14:27:19

    Bonjour
    effectivement, j'ai une vie personnelle :D 
    pas de mises à jour pour l'instant, on attend la fin de la désinfection.

    Relance Toolbar S&D

  • Choisis cette fois-ci l'option 2. ( Suppression )
    Ton bureau va disparaitre, c'est normal. Laisse l'outil travailler.
  • Ne ferme pas la fenêtre lors de la suppression !
  • Poste le rapport généré. ( C:\TB.txt )

    reposte un log hijackthis stp
    12 Novembre 2008 15:40:23

    re , excuse moi pour ma maladresse je veux allée toujours plus vite que la musique alors qu'il faut prendre le temps de l'écouter.
    -----------\\ ToolBar S&D 1.2.4 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3200+ )
    BIOS : Ver 1.00PARTTBL
    USER : Angie ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1169 [VPS 081111-0] 4.8.1169 (Activated)
    C:\ (Local Disk) - NTFS - Total:37 Go (Free:13 Go)
    D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

    "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
    Option : [2] ( 12/11/2008|15:23 )

    -----------\\ SUPPRESSION

    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@bananalotto[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.bananalotto[2].txt
    Supprime! - C:\DOCUME~1\Angie\Favoris\http--www.dailymotion.com-playlist-xhcj4_gerbignio_la-chanson...
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\Hotbar\IESkins
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\Hotbar\v3.0
    Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Hotbar
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@contentcatalog.hotbar[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@hotbar[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@www.hotbar[2].txt
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSA.dat
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSAAbout.mht
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSAau.dat
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSAEula.mht
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSA_kyf.dat
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@mywaytoperfection.blog4ever[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@cs.shopperreports[1].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@h.starware[2].txt
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@try.starware[1].txt
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\WeatherDPA\Weather
    Supprime! - C:\DOCUME~1\Angie\Cookies\angie@frzango.easyrencontre[1].txt
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\Hotbar
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA
    Supprime! - C:\DOCUME~1\Angie\APPLIC~1\WeatherDPA

    -----------\\ Recherche de Fichiers / Dossiers ...


    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    "Start Page"="http://www.orange.fr/"
    "Search Bar"="http://www.google.com/ie"
    "ICQ Search"="http://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
    "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
    "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
    "Start Page"="http://www.msn.com/"


    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\Angie\Local Settings\Temporary Internet Files\Content.IE5\SSC3CKQG\sa7-profs-crack-2476234_1144[1].jpg
    C:\DOCUME~1\Angie\Local Settings\Temporary Internet Files\Content.IE5\Z4BOH95E\keyGen[1].htm



    1 - "C:\ToolBar SD\TB_1.txt" - 11/11/2008|11:42 - Option : [1]
    2 - "C:\ToolBar SD\TB_2.txt" - 11/11/2008|18:41 - Option : [1]
    3 - "C:\ToolBar SD\TB_3.txt" - 12/11/2008|15:28 - Option : [2]

    -----------\\ Fin du rapport a 15:28:14,12

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:39:31, on 12/11/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16735)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\WINDOWS\VM305_STI.EXE
    C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    C:\WINDOWS\system32\svchost.exe
    C:\PROGRA~1\INCRED~1\bin\IMApp.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
    C:\WINDOWS\system32\cmd.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
    O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: BTTray.lnk = ?
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
    O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986....
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
    O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

    --
    End of file - 9788 bytes

    voila le rapport Toolbar et je fait suivre le rapport HijacKhis .
    12 Novembre 2008 15:42:29

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:39:31, on 12/11/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16735)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\WINDOWS\VM305_STI.EXE
    C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    C:\WINDOWS\system32\svchost.exe
    C:\PROGRA~1\INCRED~1\bin\IMApp.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
    C:\WINDOWS\system32\cmd.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
    O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: BTTray.lnk = ?
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
    O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986....
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
    O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

    --
    End of file - 9788 bytes
    12 Novembre 2008 22:05:36

    re

    on continue :) 

    Télécharge MalwareByte's Anti-Malware sur ton Bureau.
    Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.

    Une fois l'installation et la mise à jour effectuées, redémarre en mode sans échec.
    AIDE : Redémarrer en mode sans échec

  • Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
  • Afin de lancer la recherche, clic sur"Rechercher".
  • Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :
    -- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
    -- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.
    [#ff0000]REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.[/#f]

    AIDE : Tuto en images sur MBAM


    13 Novembre 2008 04:20:15

    voila le rapport.
    Malwarebytes' Anti-Malware 1.30
    Version de la base de données: 1390
    Windows 5.1.2600 Service Pack 3

    13/11/2008 04:07:25
    mbam-log-2008-11-13 (04-07-06).txt

    Type de recherche: Examen complet (C:\|D:\|)
    Eléments examinés: 148474
    Temps écoulé: 4 hour(s), 33 minute(s), 47 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 6
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 3

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{055fd26d-3a88-4e15-963d-dc8493744b1d} (Adware.BHO) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.Shopping.Report) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\lurajccm.exe (Trojan.Inject) -> No action taken.
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP342\A0161664.dll (Adware.Shopper) -> No action taken.
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165068.exe (Trojan.Inject) -> No action taken.
    13 Novembre 2008 20:42:45

    Malwarebytes' Anti-Malware 1.30
    Version de la base de données: 1390
    Windows 5.1.2600 Service Pack 3

    13/11/2008 04:07:25
    mbam-log-2008-11-13 (04-07-06).txt

    Type de recherche: Examen complet (C:\|D:\|)
    Eléments examinés: 148474
    Temps écoulé: 4 hour(s), 33 minute(s), 47 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 6
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 3

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{055fd26d-3a88-4e15-963d-dc8493744b1d} (Adware.BHO) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.Shopping.Report) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\lurajccm.exe (Trojan.Inject) -> No action taken.
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP342\A0161664.dll (Adware.Shopper) -> No action taken.
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165068.exe (Trojan.Inject) -> No action taken.
    13 Novembre 2008 23:53:45

    re

    Tu as mal lu la procédure:
    dans ton rapport:
    Citation :
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165068.exe (Trojan.Inject) -> No action taken.


    Quand l'outil a trouvé quelque-chose, à la fin, il faut cliquer sur "Supprimer la sélection".

    Recommence stp
    14 Novembre 2008 08:01:58

    Bonjour , Voila le nouveau rapport .

    Malwarebytes' Anti-Malware 1.30
    Version de la base de données: 1395
    Windows 5.1.2600 Service Pack 3

    14/11/2008 07:23:47
    mbam-log-2008-11-14 (07-23-47).txt

    Type de recherche: Examen complet (C:\|D:\|)
    Eléments examinés: 150454
    Temps écoulé: 4 hour(s), 33 minute(s), 30 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 1

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP344\A0165180.exe (Trojan.Inject) -> Quarantined and deleted successfully.

    14 Novembre 2008 20:39:35

    Malwarebytes' Anti-Malware 1.30
    Version de la base de données: 1395
    Windows 5.1.2600 Service Pack 3

    14/11/2008 07:23:47
    mbam-log-2008-11-14 (07-23-47).txt

    Type de recherche: Examen complet (C:\|D:\|)
    Eléments examinés: 150454
    Temps écoulé: 4 hour(s), 33 minute(s), 30 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 1

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP344\A0165180.exe (Trojan.Inject) -> Quarantined and deleted successfully.
    14 Novembre 2008 21:58:15

    bonsoir
    Voilà ce que je te propose, tu vas remplacer Avast! par Antivir, qui est gratuit aussi mais beaucoup plus efficace, tu vas faire un scan avec et poster le rapport. :) 


    Désinstalle correctement Avast!


    Pour le remplacer par Antivir.

    -->Tuto<--


    Pourquoi changer ? : Avast! vs Antivir
    mais aussi:
    14 antivirus au banc d'essai
    Citation :
    Antivir : le plus efficace des gratuits



    15 Novembre 2008 00:20:38

    re voila le rapport.


    Avira AntiVir Personal
    Report file date: vendredi 14 novembre 2008 22:43

    Scanning for 1035635 virus strains and unwanted programs.

    Licensed to: Avira AntiVir PersonalEdition Classic
    Serial number: 0000149996-ADJIE-0001
    Platform: Windows XP
    Windows version: (Service Pack 3) [5.1.2600]
    Boot mode: Normally booted
    Username: SYSTEM
    Computer name: ANGIE-7C6C57DD3

    Version information:
    BUILD.DAT : 8.2.0.336 16933 Bytes 30/10/2008 11:40:00
    AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 09:57:53
    AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 08:56:40
    LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 13:44:19
    LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 08:58:52
    ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 21:41:09
    ANTIVIR1.VDF : 7.1.0.56 411136 Bytes 09/11/2008 21:41:11
    ANTIVIR2.VDF : 7.1.0.57 2048 Bytes 09/11/2008 21:41:11
    ANTIVIR3.VDF : 7.1.0.88 210944 Bytes 14/11/2008 21:41:12
    Engineversion : 8.2.0.31
    AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 11:05:56
    AESCRIPT.DLL : 8.1.1.15 332156 Bytes 14/11/2008 21:41:21
    AESCN.DLL : 8.1.1.5 123251 Bytes 14/11/2008 21:41:20
    AERDL.DLL : 8.1.1.3 438645 Bytes 14/11/2008 21:41:20
    AEPACK.DLL : 8.1.3.4 393591 Bytes 14/11/2008 21:41:19
    AEOFFICE.DLL : 8.1.0.30 196986 Bytes 14/11/2008 21:41:19
    AEHEUR.DLL : 8.1.0.71 1487222 Bytes 14/11/2008 21:41:18
    AEHELP.DLL : 8.1.1.3 119157 Bytes 14/11/2008 21:41:16
    AEGEN.DLL : 8.1.1.0 319859 Bytes 14/11/2008 21:41:15
    AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 11:05:56
    AECORE.DLL : 8.1.4.1 172405 Bytes 14/11/2008 21:41:14
    AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 11:05:56
    AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 09:40:05
    AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 10:28:01
    AVREP.DLL : 8.0.0.2 98344 Bytes 14/11/2008 21:41:13
    AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 12:26:40
    AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 09:29:23
    AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 13:27:49
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 18:28:02
    SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 13:49:40
    NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 13:05:10
    RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 14:48:07
    RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 14:34:37

    Configuration settings for the scan:
    Jobname..........................: Complete system scan
    Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: on
    Scan boot sector.................: on
    Boot sectors.....................: C:,
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: off
    Scan all files...................: Intelligent file selection
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium

    Start of the scan: vendredi 14 novembre 2008 22:43

    The scan of running processes will be started
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'avcenter.exe' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
    Scan process 'avguard.exe' - '1' Module(s) have been scanned
    Scan process 'sched.exe' - '1' Module(s) have been scanned
    Scan process 'epmworker.exe' - '1' Module(s) have been scanned
    Scan process 'skypePM.exe' - '1' Module(s) have been scanned
    Scan process 'Generic.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'alg.exe' - '1' Module(s) have been scanned
    Scan process 'BTTray.exe' - '1' Module(s) have been scanned
    Scan process 'ImApp.exe' - '1' Module(s) have been scanned
    Scan process 'Skype.exe' - '1' Module(s) have been scanned
    Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
    Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
    Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
    Scan process 'rundll32.exe' - '1' Module(s) have been scanned
    Scan process 'Application Launcher.exe' - '1' Module(s) have been scanned
    Scan process 'VM305_STI.EXE' - '1' Module(s) have been scanned
    Scan process 'jusched.exe' - '1' Module(s) have been scanned
    Scan process 'QTTask.exe' - '1' Module(s) have been scanned
    Scan process 'explorer.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'btwdins.exe' - '1' Module(s) have been scanned
    Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    39 processes with 39 modules were scanned

    Starting master boot sector scan:
    Master boot sector HD0
    [INFO] No virus was found!

    Start scanning boot sectors:
    Boot sector 'C:\'
    [INFO] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '61' files ).


    Starting the file scan:

    Begin scan in 'C:\'
    C:\hiberfil.sys
    [WARNING] The file could not be opened!
    C:\pagefile.sys
    [WARNING] The file could not be opened!
    C:\Documents and Settings\Angie\Local Settings\Temporary Internet Files\Content.IE5\SSC3CKQG\trace[1].htm
    [DETECTION] Contains recognition pattern of the HTML/Infected.WebPage.Gen HTML script virus
    [NOTE] The file was moved to '497efa32.qua'!
    C:\Documents and Settings\Angie\Local Settings\Temporary Internet Files\Content.IE5\ZON4RDPU\x1x1fq_denise-richards-sexyblog_sexy[1].htm
    [DETECTION] Contains HEUR/HTML.Malware suspicious code
    [NOTE] The detection was classified as suspicious.
    [NOTE] The file was moved to '4995fba9.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Incomplete\T-3545425-dis moi bb burnes.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4950fcb2.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\Ayumi Hamasaki - Still Alone.wma
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4992fd0c.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\bonne humeur la chanson du.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '498bfd07.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\dis moi bb burnes(1).mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4990fd07.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\dis moi bb burnes.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4990fd0a.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\donne moi le pouvoir dachat.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '498bfd16.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\i got la chanson du dimanche.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4984fce0.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\il faut quon sauve ses amis le .mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '493dfd2f.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\je collectionne des canards 192kb.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '493dfd2d.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\je vis seul excalibur lepee 192kb.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '493dfd30.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\Leann Rimes - Looking Through Your Eyes.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '497efd38.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\les dents bleues la chanson du.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4990fd3b.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\les jo du pequin .mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4990fd40.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\maradona manu chao.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '498ffd41.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\minikeums MTV.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '498bfd51.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\right here waiting bonnie.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4984fd5b.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\sakura chirari airi suzuki.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4988fd5d.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\shym reflets.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4996fd6d.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\si tous sarrete bonnie tyler .mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '493dfd6f.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\si tout sarrete bonnie tyler.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '493dfd70.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\super pouvoir dachat la du.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '498dfd7d.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\tas pas decouvert le feu la du.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4990fd6f.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\zoe avril laccident.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4982fd83.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\bonne humeur la chanson du.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '498bfd89.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\dis moi bb burnes(1).mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4990fd84.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\dis moi bb burnes.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '48e68815.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\donne moi le pouvoir dachat.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '498bfd8b.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\i got la chanson du dimanche.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4984fd3e.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\les dents bleues la chanson du.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4990fd88.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\les jo du pequin .mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4990fd8a.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\right here waiting bonnie.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4984fd91.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\sakura chirari airi suzuki.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4988fd8d.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\si tous sarrete bonnie tyler .mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '493dfd96.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\si tout sarrete bonnie tyler.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '484b8807.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\super pouvoir dachat la du.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '498dfda3.qua'!
    C:\Documents and Settings\Angie\Mes documents\LimeWire\Saved\musik(L]\tas pas decouvert le feu la du.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4990fd92.qua'!
    C:\Documents and Settings\Angie\Shared\animaux et chocolat sims.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '4986fe7a.qua'!
    C:\Documents and Settings\Angie\Shared\dors mon fils fatalpicard.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '498ffe80.qua'!
    C:\Documents and Settings\Angie\Shared\je marche seul star ac prime 5.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '493dfe78.qua'!
    C:\Documents and Settings\Angie\Shared\je reve dun pays cest pas ma.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '484ea0c9.qua'!
    C:\Documents and Settings\Angie\Shared\murcy duffy.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '498ffe8d.qua'!
    C:\Documents and Settings\Angie\Shared\un monde meilleur.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE] The file was moved to '493dfe8a.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\cssdejsl.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '4990fe96.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\kfentesz.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '4982fe89.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\mgdfhctk.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '4981fe8b.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\mmyfutqt.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '4996fe91.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\nehbgkbd.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '4985fe8a.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\pkhsymnf.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '4985fe91.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\qzkrcwwi.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '4988fea0.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\ssehxhjc.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '4982fe9a.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\tjrdkicx.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '498ffe91.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\tubvismg.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '497ffe9d.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\wsapuzmt.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '497efe9b.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\yfexpbyc.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '4982fe8f.qua'!
    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\yynfxohr.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '498bfea2.qua'!
    C:\Lop SD\Backup-Lop\Program Files\Circle Developement\Uninstall.exe
    [DETECTION] Is the TR/Obfuscated.264192.4 Trojan
    [NOTE] The file was moved to '4986fe98.qua'!
    C:\Program Files\Navilog1\Backupnavi\aetflty.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '4992009f.qua'!
    C:\Program Files\Navilog1\Backupnavi\drxjej.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '499600ac.qua'!
    C:\Program Files\Navilog1\Backupnavi\edheeylbk.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '4986009f.qua'!
    C:\Program Files\Navilog1\Backupnavi\fnnpbnv.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '498c00a9.qua'!
    C:\Program Files\Navilog1\Backupnavi\gksyvw.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '499100a7.qua'!
    C:\Program Files\Navilog1\Backupnavi\jrevtkpai.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '498300ae.qua'!
    C:\Program Files\Navilog1\Backupnavi\juranxvf.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '499000b1.qua'!
    C:\Program Files\Navilog1\Backupnavi\nywagb.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '499500b6.qua'!
    C:\Program Files\Navilog1\Backupnavi\ofjoblgag.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '498800a4.qua'!
    C:\Program Files\Navilog1\Backupnavi\smtvuiat.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '499200ac.qua'!
    C:\Program Files\Navilog1\Backupnavi\theixxnm.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '498300a7.qua'!
    C:\Program Files\Navilog1\Backupnavi\tytalbxdke.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '499200b9.qua'!
    C:\Program Files\Navilog1\Backupnavi\vnjxqpsj.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '498800ae.qua'!
    C:\Program Files\Navilog1\Backupnavi\vrhnpg.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '498600b3.qua'!
    C:\Program Files\Navilog1\Backupnavi\witdpicxe.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '499200ab.qua'!
    C:\Program Files\Navilog1\Backupnavi\wnqfksr.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '498f00b0.qua'!
    C:\Program Files\Navilog1\Backupnavi\wopaxo.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '498e00b2.qua'!
    C:\Program Files\Navilog1\Backupnavi\wqdsnbcz.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '498200b5.qua'!
    C:\Program Files\Navilog1\Backupnavi\xbgfka.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '498500a6.qua'!
    C:\Program Files\Navilog1\Backupnavi\zuclikge.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '498100ba.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP328\A0156590.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '494f0165.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP338\A0160651.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f017a.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP338\A0160652.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5fcb.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP338\A0160653.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f017c.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP342\A0161662.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0182.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165063.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0229.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165066.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f022a.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165069.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5c9b.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165070.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f022b.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165072.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5c9c.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165073.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f022c.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165074.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5c9d.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165075.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f022d.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165076.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5c9e.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165077.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f022e.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165079.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f022f.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165080.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5c80.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165081.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0231.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165082.exe
    [DETECTION] Is the TR/Obfuscated.264192.4 Trojan
    [NOTE] The file was moved to '494f0230.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165101.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '483c5c82.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165103.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '494f0232.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165104.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '483c5c83.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165105.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '494f0234.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165106.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '494f0233.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165107.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5c85.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165108.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0236.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165109.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0235.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165110.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5c86.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165113.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '483c5c87.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165114.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '494f0238.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165115.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0237.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165117.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '483c5c88.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165118.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5c89.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165119.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f023a.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165120.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0239.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165121.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '483c5c8a.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165122.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5c8b.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165123.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f023c.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP343\A0165124.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '494f023b.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165414.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f024d.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165415.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f024e.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165416.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f024f.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165417.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5ce0.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165418.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0250.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165419.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5ce1.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165420.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0251.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165421.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0252.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165422.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5ce3.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165423.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0253.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165424.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5ce4.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165425.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0255.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165426.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0254.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165427.exe
    [DETECTION] Is the TR/Obfuscated.264192.4 Trojan
    [NOTE] The file was moved to '483c5ce5.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165428.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '494f0256.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165429.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '483c5ce6.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165430.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '494f0257.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165431.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '483c5ce7.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165432.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '483c5ce8.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165433.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0258.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165434.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f0259.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165435.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5cea.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165436.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f025a.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165437.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '494f025b.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165438.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '483c5cec.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165439.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f025d.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165440.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '483c5cee.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165441.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f025c.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165442.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5ced.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165443.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f025f.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165444.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '483c5cd0.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165445.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '494f025e.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165446.exe
    [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
    [NOTE] The file was moved to '483c5cef.qua'!
    C:\System Volume Information\_restore{46BF702E-97B3-4747-AF34-780BEB0B0947}\RP347\A0165447.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '494f0240.qua'!
    C:\WINDOWS\system32\ugomegu.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '498d0636.qua'!
    C:\WINDOWS\system32\uwsui.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE] The file was moved to '49910649.qua'!
    C:\WINDOWS\system32\veopbzlow.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE] The file was moved to '498d0638.qua'!


    End of the scan: samedi 15 novembre 2008 00:14
    Used time: 1:31:23 Hour(s)

    The scan has been done completely.

    7716 Scanning directories
    247794 Files were scanned
    153 viruses and/or unwanted programs were found
    1 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    154 files were moved to quarantine
    0 files were renamed
    2 Files cannot be scanned
    247638 Files not concerned
    2215 Archives were scanned
    2 Warnings
    154 Notes



    15 Novembre 2008 18:39:06

    bonsoir
    ~Fais une analyse antivirus en ligne sur le site de Kaspersky
    http://www.kaspersky.com/kos/eng/partner/default/kavweb...

    * Clique sur Accept
    * Une barre jaune va te demander si tu acceptes d'installer le Kavwebscan_Unicode.cab, installe l'Active X.
    * clique une nouvelle fois sur "Accept"
    * Les bases de mises à jour vont s'installer, patiente un moment
    * Clique sur Next.
    * Clique sur My Computer, le scan se met en route; attends la fin du scan sans fermer la fenêtre sinon il s'arrêtera.
    * Poste le rapport de scan.
    15 Novembre 2008 21:43:48

    vola le rapport

    KASPERSKY ONLINE SCANNER 7 REPORT
    Saturday, November 15, 2008
    Operating System: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
    Kaspersky Online Scanner 7 version: 7.0.25.0
    Program database last update: Saturday, November 15, 2008 15:59:11
    Records in database: 1386080


    Scan settings
    Scan using the following database extended
    Scan archives yes
    Scan mail databases yes

    Scan area My Computer
    C:\
    D:\

    Scan statistics
    Files scanned 105933
    Threat name 5
    Infected objects 9
    Suspicious objects 0
    Duration of the scan 02:19:39

    File name Threat name Threats count
    C:\Documents and Settings\Angie\Mes documents\Programme\incredimail_install.exe Infected: not-a-virus:D ownloader.Win32.ImLoader.m 1

    C:\Documents and Settings\Angie\Shared\03 Track 3.wma Infected: Trojan-Downloader.WMA.Wimad.l 1

    C:\Lop SD\Backup-Lop\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\else link.exe Infected: Trojan.Win32.Obfuscated.gen 1

    C:\Lop SD\Backup-Lop\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\Rect Great.exe Infected: Trojan.Win32.Obfuscated.gen 1

    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\ficnjcvl.exe Infected: Trojan.Win32.Obfuscated.gen 1

    C:\Lop SD\Backup-Lop\DOCUME~1\Angie\APPLIC~1\MANAGE~1\jdcldezi.exe Infected: Trojan.Win32.Obfuscated.gen 1

    C:\Program Files\IncrediMail\bin\IncrediMail_Install.exe Infected: not-a-virus:D ownloader.Win32.ImLoader.m 1

    C:\Program Files\Messenger Plus! Live\Scripts\Voir contact qui ton bloquer\huhu_ctrl.js Infected: Backdoor.JS.Agent.a 1

    C:\Program Files\Navilog1\Backupnavi\bnxovryq.exe Infected: Trojan.Win32.Obfuscated.aqn 1

    The selected area was scanned.
    15 Novembre 2008 21:47:22

    re

    supprime les fichiers/dossiers en gras:


    C:\Documents and Settings\Angie\Shared\03 Track 3.wma
    C:\Lop SD
    C:\Program Files\Messenger Plus! Live\Scripts\Voir contact qui ton bloquer
    C:\Program Files\Navilog1


    d'autres soucis?
    15 Novembre 2008 22:06:44

    comment je fais pour les supprimer ?
    16 Novembre 2008 16:17:26

    re
    on va utiliser un outil...
    Télécharge OTMoveIt3 (OldTimer). Sauvegarde-le sur ton Bureau.
    Copie (Ctrl+C) le texte se situant dans le cadre ci-dessous :

    :processes
    explorer.exe

    :files
    C:\Documents and Settings\Angie\Shared\03 Track 3.wma
    C:\Lop SD
    C:\Program Files\Messenger Plus! Live\Scripts\Voir contact qui ton bloquer
    C:\Program Files\Navilog1
    :commands
    [purity]
    [emptytemp]
    [start explorer]
    [reboot]


    Double clique sur OTMoveIt3.exe afin de le lancer.
    Colle (ou Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
    Clique maintenant sur le bouton [#ff0000]MoveIt![/#f] puis ferme OTMoveIt3.

    [#ff0000]Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.[/#f]

    Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    Le nom du rapport correspond au moment de sa création : date_heure.log
    16 Novembre 2008 18:20:46

    Merci pour tous ça roule comme avant .
    17 Novembre 2008 22:11:23

    de rien
    bon surf
    :hello: 
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS