bonjour,

le pc de mon gendre est verrolé.

symptômes:lenteur, et pages du web qui s'ouvre sur spyware doctor et cid et j'en passe..

j'ai déja eu ce problème.

et les responsables en questions se trouvaient dans les options internet.contenu.certificats.editeurs approuvés.mais là je n'ai rien.

j'ai nettoyé avec ccleanear, esaycleaner, Spybot et l'antivirus avg

voici le rapport hijacthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:52:35, on 09/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\spupdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\spnpinst.exe
C:\WINDOWS\system32\Sysocmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\explorer.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\Documents and Settings\Fredo\Mes documents\HiJackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.yahoo.com">http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*http://fr.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.yahoo.com">http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*http://fr.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Online chin internet bolt] C:\Documents and Settings\All Users.WINDOWS\Application Data\Bags Plus Online Chin\Draw Mess.exe
O4 - HKLM\..\RunOnce: [KB926239] rundll32.exe apphelp.dll,ShimFlushCache
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [idle eggs] C:\DOCUME~1\Fredo\APPLIC~1\ANTESI~1\32 Clock Mix.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/webplayer/stage6/windows/AutoDLDivXWebPlayerInstaller.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

merci à ceux qui pourront m'aider

bonjour et bienvenue

Télécharger Lop S&D.exe de eric71 et angeldark

http://eric.71.mespages.googlepages.com/Lop.sd.exe

scanne ton Pc option1

poste le rapport obtenu

merci chrifeur d'avoir répondu.

voici ce que donne le rapport lop S&D:

-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Fredo ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 09/07/2008 | 19:56:14,87 ] [ PC : FRED ]
[ MAJ : 06-07-2008 | 10:55 ]

-------------[ Listing des dossiers dans Application Data ]------------

[16/12/2007|20:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.zreglib
[03/11/2007|03:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[14/10/2007|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
[01/10/2007|20:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[07/10/2007|23:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[09/10/2007|00:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LightScribe
[08/10/2007|17:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[15/01/2008|21:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[25/11/2007|22:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[08/10/2007|23:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[06/10/2007|10:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBT
[30/01/2008|09:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[06/10/2007|09:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[15/01/2008|21:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[20/05/2008|08:36] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Adobe
[17/05/2008|15:23] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\avg7
[17/04/2008|20:23] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Azureus
[09/07/2008|13:53] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Bags Plus Online Chin
[11/05/2008|20:26] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\desktop.ini
[17/04/2008|20:03] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Google
[17/04/2008|08:43] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Grisoft
[09/07/2008|13:51] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Hewlett-Packard
[07/06/2008|16:00] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HP
[09/07/2008|13:52] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HP Product Assistant
[09/07/2008|13:52] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HPSSUPPLY
[09/06/2008|01:46] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\hpzinstall.log
[24/04/2008|20:54] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Messenger Plus!
[07/07/2008|13:07] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft
[22/05/2008|12:06] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MSN6
[21/05/2008|08:53] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Nero
[17/05/2008|20:19] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SBT
[20/05/2008|08:12] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Spybot - Search & Destroy
[09/07/2008|13:52] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TEMP
[09/07/2008|09:13] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TuneUp Software
[07/06/2008|16:17] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WEBREG
[21/05/2008|13:47] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Genuine Advantage
[26/04/2008|18:28] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WLInstaller
[09/07/2008|13:51] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Yahoo! Companion

[12/10/2007|01:09] C:\DOCUME~1\BOB2~1\APPLIC~1\Adobe
[09/10/2007|00:03] C:\DOCUME~1\BOB2~1\APPLIC~1\Ahead
[11/05/2008|23:30] C:\DOCUME~1\BOB2~1\APPLIC~1\AVG7
[22/01/2008|17:32] C:\DOCUME~1\BOB2~1\APPLIC~1\Azureus
[01/10/2007|20:26] C:\DOCUME~1\BOB2~1\APPLIC~1\desktop.ini
[28/10/2007|22:12] C:\DOCUME~1\BOB2~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[29/10/2007|17:23] C:\DOCUME~1\BOB2~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[28/10/2007|22:22] C:\DOCUME~1\BOB2~1\APPLIC~1\Hewlett-Packard
[02/10/2007|00:43] C:\DOCUME~1\BOB2~1\APPLIC~1\Identities
[27/01/2008|13:17] C:\DOCUME~1\BOB2~1\APPLIC~1\ma-config.com
[06/10/2007|09:25] C:\DOCUME~1\BOB2~1\APPLIC~1\Macromedia
[23/01/2008|19:01] C:\DOCUME~1\BOB2~1\APPLIC~1\Microsoft
[06/10/2007|10:14] C:\DOCUME~1\BOB2~1\APPLIC~1\Microsoft Web Folders
[08/10/2007|01:57] C:\DOCUME~1\BOB2~1\APPLIC~1\Mozilla
[09/10/2007|00:45] C:\DOCUME~1\BOB2~1\APPLIC~1\NeroDCTemplates
[24/11/2007|19:54] C:\DOCUME~1\BOB2~1\APPLIC~1\Sun

[01/10/2007|20:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[02/10/2007|00:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[11/05/2008|20:26] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\desktop.ini
[11/05/2008|20:07] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\Microsoft

[20/05/2008|08:42] C:\DOCUME~1\Fredo\APPLIC~1\Adobe
[26/04/2008|15:04] C:\DOCUME~1\Fredo\APPLIC~1\Ahead
[09/07/2008|13:48] C:\DOCUME~1\Fredo\APPLIC~1\ante size amen
[09/07/2008|19:41] C:\DOCUME~1\Fredo\APPLIC~1\AVG7
[09/07/2008|13:29] C:\DOCUME~1\Fredo\APPLIC~1\Azureus
[11/05/2008|20:26] C:\DOCUME~1\Fredo\APPLIC~1\desktop.ini
[09/07/2008|13:49] C:\DOCUME~1\Fredo\APPLIC~1\EoRezo
[20/04/2008|15:32] C:\DOCUME~1\Fredo\APPLIC~1\Google
[09/07/2008|13:52] C:\DOCUME~1\Fredo\APPLIC~1\HPAppData
[11/05/2008|20:14] C:\DOCUME~1\Fredo\APPLIC~1\Identities
[08/06/2008|13:23] C:\DOCUME~1\Fredo\APPLIC~1\ItsLabel
[17/05/2008|20:29] C:\DOCUME~1\Fredo\APPLIC~1\Macromedia
[28/06/2008|15:59] C:\DOCUME~1\Fredo\APPLIC~1\Microsoft
[17/05/2008|18:39] C:\DOCUME~1\Fredo\APPLIC~1\Microsoft Web Folders
[17/05/2008|20:38] C:\DOCUME~1\Fredo\APPLIC~1\Mozilla
[22/05/2008|12:26] C:\DOCUME~1\Fredo\APPLIC~1\MSN6
[21/04/2008|19:59] C:\DOCUME~1\Fredo\APPLIC~1\Shareaza
[09/07/2008|09:14] C:\DOCUME~1\Fredo\APPLIC~1\TuneUp Software
[09/07/2008|14:14] C:\DOCUME~1\Fredo\APPLIC~1\vlc
[09/07/2008|13:52] C:\DOCUME~1\Fredo\APPLIC~1\vmntoolbar
[09/07/2008|13:51] C:\DOCUME~1\Fredo\APPLIC~1\Yahoo!

[07/10/2007|23:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[06/10/2007|09:16] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[17/04/2008|08:43] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\AVG7
[21/04/2008|19:59] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft

[02/10/2007|00:35] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[11/05/2008|20:07] C:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[09/07/2008 09:14][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[09/07/2008 19:41][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 12:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[20/05/2008|08:35] C:\Program Files\Adobe
[17/04/2008|20:23] C:\Program Files\Azureus
[22/01/2008|17:35] C:\Program Files\CCleaner
[17/05/2008|15:23] C:\Program Files\Circle Developement
[12/05/2008|20:40] C:\Program Files\C-Media 3D Audio
[20/05/2008|08:19] C:\Program Files\CodeStuff
[02/10/2007|00:33] C:\Program Files\ComPlus Applications
[09/07/2008|13:51] C:\Program Files\DivX
[09/07/2008|13:52] C:\Program Files\EoRezo
[09/07/2008|09:10] C:\Program Files\Fichiers communs
[09/07/2008|09:04] C:\Program Files\Google
[17/04/2008|08:43] C:\Program Files\Grisoft
[09/07/2008|13:51] C:\Program Files\Hewlett-Packard
[09/07/2008|13:51] C:\Program Files\HP
[22/05/2008|07:53] C:\Program Files\Icons
[17/04/2008|18:43] C:\Program Files\IncrediMail
[12/05/2008|20:40] C:\Program Files\InstallShield Installation Information
[09/07/2008|13:49] C:\Program Files\Internet Explorer
[09/07/2008|13:50] C:\Program Files\ItsLabel
[17/04/2008|20:02] C:\Program Files\Java
[17/04/2008|17:42] C:\Program Files\Messenger
[08/05/2008|18:54] C:\Program Files\Messenger Plus! Live
[17/05/2008|20:18] C:\Program Files\microsoft frontpage
[17/05/2008|20:32] C:\Program Files\Microsoft Office
[24/05/2008|13:10] C:\Program Files\Microsoft Picture It! 9
[15/01/2008|21:27] C:\Program Files\Microsoft SQL Server Compact Edition
[17/05/2008|20:32] C:\Program Files\Microsoft.NET
[12/05/2008|20:30] C:\Program Files\Movie Maker
[09/07/2008|19:48] C:\Program Files\Mozilla Firefox
[02/10/2007|00:32] C:\Program Files\MSN
[02/10/2007|00:32] C:\Program Files\MSN Gaming Zone
[14/10/2007|13:01] C:\Program Files\MSXML 4.0
[21/05/2008|08:53] C:\Program Files\Nero
[12/05/2008|20:28] C:\Program Files\NetMeeting
[17/04/2008|17:41] C:\Program Files\Outlook Express
[09/07/2008|13:52] C:\Program Files\PhotoFiltre Studio
[09/07/2008|13:50] C:\Program Files\Picasa2
[20/05/2008|08:21] C:\Program Files\SereneScreen
[02/10/2007|00:34] C:\Program Files\Services en ligne
[20/05/2008|19:37] C:\Program Files\Shareaza
[17/05/2008|20:19] C:\Program Files\Snapshot Viewer
[09/07/2008|15:35] C:\Program Files\splus
[20/05/2008|08:10] C:\Program Files\Spybot - Search & Destroy
[20/05/2008|08:20] C:\Program Files\SuperCopier2
[07/10/2007|16:00] C:\Program Files\ToniArts
[09/07/2008|13:53] C:\Program Files\TuneUp Utilities 2008
[02/10/2007|00:43] C:\Program Files\Uninstall Information
[21/05/2008|14:13] C:\Program Files\vicons
[09/07/2008|14:13] C:\Program Files\VideoLAN
[08/06/2008|03:25] C:\Program Files\Visicom Media
[09/07/2008|13:52] C:\Program Files\vmntoolbar
[26/04/2008|18:48] C:\Program Files\Windows Live
[06/10/2007|09:12] C:\Program Files\Windows Media Connect 2
[09/07/2008|15:19] C:\Program Files\Windows Media Player
[12/05/2008|20:28] C:\Program Files\Windows NT
[17/05/2008|19:57] C:\Program Files\WindowsUpdate
[17/04/2008|19:53] C:\Program Files\WinPcap
[17/05/2008|20:39] C:\Program Files\WinRAR
[02/10/2007|00:36] C:\Program Files\xerox
[09/07/2008|13:51] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[20/05/2008|08:35] C:\Program Files\Fichiers communs\Adobe
[21/05/2008|08:54] C:\Program Files\Fichiers communs\Ahead
[06/10/2007|09:40] C:\Program Files\Fichiers communs\DESIGNER
[07/06/2008|15:58] C:\Program Files\Fichiers communs\Hewlett-Packard
[09/07/2008|13:52] C:\Program Files\Fichiers communs\HP
[07/10/2007|15:59] C:\Program Files\Fichiers communs\InstallShield
[13/10/2007|00:28] C:\Program Files\Fichiers communs\Java
[24/05/2008|13:07] C:\Program Files\Fichiers communs\Microsoft Shared
[02/10/2007|00:33] C:\Program Files\Fichiers communs\MSSoap
[01/10/2007|20:26] C:\Program Files\Fichiers communs\ODBC
[02/10/2007|00:33] C:\Program Files\Fichiers communs\Services
[01/10/2007|20:26] C:\Program Files\Fichiers communs\SpeechEngines
[17/04/2008|17:41] C:\Program Files\Fichiers communs\System
[15/01/2008|21:22] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[09/07/2008|13:53] C:\Program Files\Fichiers communs\Wise Installation Wizard

---------------------------[ Process ]--------------------------

... 40

iexplore.exe ~ [752]
iexplore.exe ~ [1204]

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Bags Plus Online Chin
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Bags Plus Online Chin\Draw Mess.exe
C:\Program Files\Circle Developement
C:\DOCUME~1\Fredo\Cookies\fredo@www.adserver5[1].txt
C:\DOCUME~1\Fredo\Cookies\fredo@adopt.euroclick[1].txt

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Online chin internet bolt"="C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\Bags Plus Online Chin\\Draw Mess.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-09 19:57:38
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

=> C:\DOCUME~1\Fredo\MESDOC~1\Downloads\Metadata\(DoD) sefyu - molotov 4 ‚dition collector _crack_ (Special).wma.xml
=> C:\Documents and Settings\Fredo\Mes documents\Downloads\Metadata\(DoD) sefyu - molotov 4 ‚dition collector _crack_ (Special).wma.xml

[F:1][D:3]-> C:\DOCUME~1\Fredo\LOCALS~1\Temp
[F:25][D:0]-> C:\DOCUME~1\Fredo\Cookies
[F:151][D:4]-> C:\DOCUME~1\Fredo\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 19:58:10,34 ]----------------------

relance lop s&d choisis l'option 2 puis poste le rapport obtenu

voici le rapport 2
-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Fredo ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 09/07/2008 | 19:56:14,87 ] [ PC : FRED ]
[ MAJ : 06-07-2008 | 10:55 ]

-------------[ Listing des dossiers dans Application Data ]------------

[16/12/2007|20:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.zreglib
[03/11/2007|03:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[14/10/2007|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
[01/10/2007|20:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[07/10/2007|23:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[09/10/2007|00:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LightScribe
[08/10/2007|17:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[15/01/2008|21:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[25/11/2007|22:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[08/10/2007|23:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[06/10/2007|10:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBT
[30/01/2008|09:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[06/10/2007|09:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[15/01/2008|21:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[20/05/2008|08:36] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Adobe
[17/05/2008|15:23] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\avg7
[17/04/2008|20:23] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Azureus
[09/07/2008|13:53] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Bags Plus Online Chin
[11/05/2008|20:26] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\desktop.ini
[17/04/2008|20:03] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Google
[17/04/2008|08:43] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Grisoft
[09/07/2008|13:51] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Hewlett-Packard
[07/06/2008|16:00] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HP
[09/07/2008|13:52] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HP Product Assistant
[09/07/2008|13:52] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HPSSUPPLY
[09/06/2008|01:46] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\hpzinstall.log
[24/04/2008|20:54] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Messenger Plus!
[07/07/2008|13:07] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft
[22/05/2008|12:06] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MSN6
[21/05/2008|08:53] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Nero
[17/05/2008|20:19] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SBT
[20/05/2008|08:12] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Spybot - Search & Destroy
[09/07/2008|13:52] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TEMP
[09/07/2008|09:13] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TuneUp Software
[07/06/2008|16:17] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WEBREG
[21/05/2008|13:47] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Genuine Advantage
[26/04/2008|18:28] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WLInstaller
[09/07/2008|13:51] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Yahoo! Companion

[12/10/2007|01:09] C:\DOCUME~1\BOB2~1\APPLIC~1\Adobe
[09/10/2007|00:03] C:\DOCUME~1\BOB2~1\APPLIC~1\Ahead
[11/05/2008|23:30] C:\DOCUME~1\BOB2~1\APPLIC~1\AVG7
[22/01/2008|17:32] C:\DOCUME~1\BOB2~1\APPLIC~1\Azureus
[01/10/2007|20:26] C:\DOCUME~1\BOB2~1\APPLIC~1\desktop.ini
[28/10/2007|22:12] C:\DOCUME~1\BOB2~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[29/10/2007|17:23] C:\DOCUME~1\BOB2~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[28/10/2007|22:22] C:\DOCUME~1\BOB2~1\APPLIC~1\Hewlett-Packard
[02/10/2007|00:43] C:\DOCUME~1\BOB2~1\APPLIC~1\Identities
[27/01/2008|13:17] C:\DOCUME~1\BOB2~1\APPLIC~1\ma-config.com
[06/10/2007|09:25] C:\DOCUME~1\BOB2~1\APPLIC~1\Macromedia
[23/01/2008|19:01] C:\DOCUME~1\BOB2~1\APPLIC~1\Microsoft
[06/10/2007|10:14] C:\DOCUME~1\BOB2~1\APPLIC~1\Microsoft Web Folders
[08/10/2007|01:57] C:\DOCUME~1\BOB2~1\APPLIC~1\Mozilla
[09/10/2007|00:45] C:\DOCUME~1\BOB2~1\APPLIC~1\NeroDCTemplates
[24/11/2007|19:54] C:\DOCUME~1\BOB2~1\APPLIC~1\Sun

[01/10/2007|20:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[02/10/2007|00:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[11/05/2008|20:26] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\desktop.ini
[11/05/2008|20:07] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\Microsoft

[20/05/2008|08:42] C:\DOCUME~1\Fredo\APPLIC~1\Adobe
[26/04/2008|15:04] C:\DOCUME~1\Fredo\APPLIC~1\Ahead
[09/07/2008|13:48] C:\DOCUME~1\Fredo\APPLIC~1\ante size amen
[09/07/2008|19:41] C:\DOCUME~1\Fredo\APPLIC~1\AVG7
[09/07/2008|13:29] C:\DOCUME~1\Fredo\APPLIC~1\Azureus
[11/05/2008|20:26] C:\DOCUME~1\Fredo\APPLIC~1\desktop.ini
[09/07/2008|13:49] C:\DOCUME~1\Fredo\APPLIC~1\EoRezo
[20/04/2008|15:32] C:\DOCUME~1\Fredo\APPLIC~1\Google
[09/07/2008|13:52] C:\DOCUME~1\Fredo\APPLIC~1\HPAppData
[11/05/2008|20:14] C:\DOCUME~1\Fredo\APPLIC~1\Identities
[08/06/2008|13:23] C:\DOCUME~1\Fredo\APPLIC~1\ItsLabel
[17/05/2008|20:29] C:\DOCUME~1\Fredo\APPLIC~1\Macromedia
[28/06/2008|15:59] C:\DOCUME~1\Fredo\APPLIC~1\Microsoft
[17/05/2008|18:39] C:\DOCUME~1\Fredo\APPLIC~1\Microsoft Web Folders
[17/05/2008|20:38] C:\DOCUME~1\Fredo\APPLIC~1\Mozilla
[22/05/2008|12:26] C:\DOCUME~1\Fredo\APPLIC~1\MSN6
[21/04/2008|19:59] C:\DOCUME~1\Fredo\APPLIC~1\Shareaza
[09/07/2008|09:14] C:\DOCUME~1\Fredo\APPLIC~1\TuneUp Software
[09/07/2008|14:14] C:\DOCUME~1\Fredo\APPLIC~1\vlc
[09/07/2008|13:52] C:\DOCUME~1\Fredo\APPLIC~1\vmntoolbar
[09/07/2008|13:51] C:\DOCUME~1\Fredo\APPLIC~1\Yahoo!

[07/10/2007|23:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[06/10/2007|09:16] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[17/04/2008|08:43] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\AVG7
[21/04/2008|19:59] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft

[02/10/2007|00:35] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[11/05/2008|20:07] C:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[09/07/2008 09:14][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[09/07/2008 19:41][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 12:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[20/05/2008|08:35] C:\Program Files\Adobe
[17/04/2008|20:23] C:\Program Files\Azureus
[22/01/2008|17:35] C:\Program Files\CCleaner
[17/05/2008|15:23] C:\Program Files\Circle Developement
[12/05/2008|20:40] C:\Program Files\C-Media 3D Audio
[20/05/2008|08:19] C:\Program Files\CodeStuff
[02/10/2007|00:33] C:\Program Files\ComPlus Applications
[09/07/2008|13:51] C:\Program Files\DivX
[09/07/2008|13:52] C:\Program Files\EoRezo
[09/07/2008|09:10] C:\Program Files\Fichiers communs
[09/07/2008|09:04] C:\Program Files\Google
[17/04/2008|08:43] C:\Program Files\Grisoft
[09/07/2008|13:51] C:\Program Files\Hewlett-Packard
[09/07/2008|13:51] C:\Program Files\HP
[22/05/2008|07:53] C:\Program Files\Icons
[17/04/2008|18:43] C:\Program Files\IncrediMail
[12/05/2008|20:40] C:\Program Files\InstallShield Installation Information
[09/07/2008|13:49] C:\Program Files\Internet Explorer
[09/07/2008|13:50] C:\Program Files\ItsLabel
[17/04/2008|20:02] C:\Program Files\Java
[17/04/2008|17:42] C:\Program Files\Messenger
[08/05/2008|18:54] C:\Program Files\Messenger Plus! Live
[17/05/2008|20:18] C:\Program Files\microsoft frontpage
[17/05/2008|20:32] C:\Program Files\Microsoft Office
[24/05/2008|13:10] C:\Program Files\Microsoft Picture It! 9
[15/01/2008|21:27] C:\Program Files\Microsoft SQL Server Compact Edition
[17/05/2008|20:32] C:\Program Files\Microsoft.NET
[12/05/2008|20:30] C:\Program Files\Movie Maker
[09/07/2008|19:48] C:\Program Files\Mozilla Firefox
[02/10/2007|00:32] C:\Program Files\MSN
[02/10/2007|00:32] C:\Program Files\MSN Gaming Zone
[14/10/2007|13:01] C:\Program Files\MSXML 4.0
[21/05/2008|08:53] C:\Program Files\Nero
[12/05/2008|20:28] C:\Program Files\NetMeeting
[17/04/2008|17:41] C:\Program Files\Outlook Express
[09/07/2008|13:52] C:\Program Files\PhotoFiltre Studio
[09/07/2008|13:50] C:\Program Files\Picasa2
[20/05/2008|08:21] C:\Program Files\SereneScreen
[02/10/2007|00:34] C:\Program Files\Services en ligne
[20/05/2008|19:37] C:\Program Files\Shareaza
[17/05/2008|20:19] C:\Program Files\Snapshot Viewer
[09/07/2008|15:35] C:\Program Files\splus
[20/05/2008|08:10] C:\Program Files\Spybot - Search & Destroy
[20/05/2008|08:20] C:\Program Files\SuperCopier2
[07/10/2007|16:00] C:\Program Files\ToniArts
[09/07/2008|13:53] C:\Program Files\TuneUp Utilities 2008
[02/10/2007|00:43] C:\Program Files\Uninstall Information
[21/05/2008|14:13] C:\Program Files\vicons
[09/07/2008|14:13] C:\Program Files\VideoLAN
[08/06/2008|03:25] C:\Program Files\Visicom Media
[09/07/2008|13:52] C:\Program Files\vmntoolbar
[26/04/2008|18:48] C:\Program Files\Windows Live
[06/10/2007|09:12] C:\Program Files\Windows Media Connect 2
[09/07/2008|15:19] C:\Program Files\Windows Media Player
[12/05/2008|20:28] C:\Program Files\Windows NT
[17/05/2008|19:57] C:\Program Files\WindowsUpdate
[17/04/2008|19:53] C:\Program Files\WinPcap
[17/05/2008|20:39] C:\Program Files\WinRAR
[02/10/2007|00:36] C:\Program Files\xerox
[09/07/2008|13:51] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[20/05/2008|08:35] C:\Program Files\Fichiers communs\Adobe
[21/05/2008|08:54] C:\Program Files\Fichiers communs\Ahead
[06/10/2007|09:40] C:\Program Files\Fichiers communs\DESIGNER
[07/06/2008|15:58] C:\Program Files\Fichiers communs\Hewlett-Packard
[09/07/2008|13:52] C:\Program Files\Fichiers communs\HP
[07/10/2007|15:59] C:\Program Files\Fichiers communs\InstallShield
[13/10/2007|00:28] C:\Program Files\Fichiers communs\Java
[24/05/2008|13:07] C:\Program Files\Fichiers communs\Microsoft Shared
[02/10/2007|00:33] C:\Program Files\Fichiers communs\MSSoap
[01/10/2007|20:26] C:\Program Files\Fichiers communs\ODBC
[02/10/2007|00:33] C:\Program Files\Fichiers communs\Services
[01/10/2007|20:26] C:\Program Files\Fichiers communs\SpeechEngines
[17/04/2008|17:41] C:\Program Files\Fichiers communs\System
[15/01/2008|21:22] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[09/07/2008|13:53] C:\Program Files\Fichiers communs\Wise Installation Wizard

---------------------------[ Process ]--------------------------

... 40

iexplore.exe ~ [752]
iexplore.exe ~ [1204]

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Bags Plus Online Chin
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Bags Plus Online Chin\Draw Mess.exe
C:\Program Files\Circle Developement
C:\DOCUME~1\Fredo\Cookies\fredo@www.adserver5[1].txt
C:\DOCUME~1\Fredo\Cookies\fredo@adopt.euroclick[1].txt

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Online chin internet bolt"="C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\Bags Plus Online Chin\\Draw Mess.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-09 19:57:38
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

=> C:\DOCUME~1\Fredo\MESDOC~1\Downloads\Metadata\(DoD) sefyu - molotov 4 ‚dition collector _crack_ (Special).wma.xml
=> C:\Documents and Settings\Fredo\Mes documents\Downloads\Metadata\(DoD) sefyu - molotov 4 ‚dition collector _crack_ (Special).wma.xml

[F:1][D:3]-> C:\DOCUME~1\Fredo\LOCALS~1\Temp
[F:25][D:0]-> C:\DOCUME~1\Fredo\Cookies
[F:151][D:4]-> C:\DOCUME~1\Fredo\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 19:58:10,34 ]----------------------

* Télécharge ToolBar-S&D ( Merci à Eric_71, Angeldark, Sham_Rock et XmichouX )

• Double-clique sur ToolBar-SD afin de lancer l'installation, un raccourci sera ajouté sur le Bureau.
• Double-clique dessus pour démarrer l'outil; choisis la langue.
• Sous Vista, faire un clic droit et "Exécuter en tant qu'administrateur" (Elévation des privilèges), puis -> Continuer.
• Tape 1 puis sur la touche [Entrée] afin de lancer la recherche.
• Patiente jusqu'à la fin de la recherche.
• À la fin du scan, le rapport s'ouvrira dans le Bloc-notes.
• Poste ce rapport, par copier/coller, dans ta prochaine réponse.
  
• Le rapport se trouve également sous : C:\TB.txt

** Aide en images

-----------\\ ToolBar S&D 1.0.3 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Fredo ] [ "C:\Toolbar SD" ] [ Selection : 1 ]
[ 09/07/2008 | 22:20:03,34 ] [ PC : FRED ]
[ MAJ : 08-07-2008 | 22:24 ]

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ [HKCU\..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

-----------\\ Fin du rapport a 22:20:27,60
voici le rapport, ç'est déjà mieux!!!

merci chrifleur.

tout est nickel.bonne journée.

bonjour

ne te sauve pas si vite

il faut terminer correctement cette désinfection...

1/ supprimer tous les outils utilisés ainsi que les rapports et les quarantaines de cette façon

Normal 0 21

Télécharge OTMoveIT (de Old_Timer) sur ton Bureau.

http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

Clic sur le bouton CleanUp! destiné à supprimer toutes traces des programmes qui ont servi à la désinfection

Le programme va télécharger un fichier texte qui servira à nettoyer les programmes que l'on a téléchargés.
NOTE : Normalement, ton pare-feu devrait te demander si OTMoveIT peut accéder à Internet

Autorise-le.

Une liste apparaît dans la partie gauche d'OTMoveIT.

Un message apparaît pour confirmer le nettoyage. Confirme

Les fichiers infectés qui se trouvent dans les quarantaines seront supprimés aussi.

OTMoveIT s'auto supprime aussi.
La manoeuvre nécessitera un redémarrage initié par le programme.

si des outils n'ont pas été supprimés fais le manuellement

2/ scanner en ligne afin de s'assurer que tout est bien parti

suis ce tutoriel et poste le rapport obtenu

http://forum.pcastuces.com/bitdefender_online_scanner___tutoriel-f31s2.htm