[Résolu] nouvelle invasion de pub CiD

Voilà je vous avais déjà demandé conseils il y a plusieurs mois parce-que j'avais toujours plein de fenêtres publicitaires qui s'ouvraient. Le problème a été résolu, ça a super bien marché pendant quelques mois, et là l'infection recommence... Mad

BONJOUR

Hijackthis

- Télécharge HiJackThis de Merijn sur ton bureau.

HijackThis

Do a scan and save log file

Aide : http://www.bibou0007.com/outils-specifiques-f78/tutorial-de-hijackthis-v202-t108.htm

Télécharge Lop S&D.exe ( d’ Eric 71 & Angeldark ) sur ton bureau.
Aide : http://www.bibou0007.com/outils-specifiques-f78/tutorial-lop-sd-t956.htm
[*]Double-clique dessus pour lancer l'installation
[*]Puis double-clique sur le raccourci Lop S&D présent sur ton bureau
[*]Séléctionne la langue souhaitée , puis choisis l'Option 1 ( Recherche )
[*]Patiente jusqu'à la fin du scan
[*]Poste le rapport généré ( C:\lopR.txt )
(Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)
_________________
Choisis ton antivirus grâce à AV-Comparatives |un doute scan sur Virustotal | Hijackthis
Rapport de grande taille clique ici

Je vous copie ça en deux fois :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:09:45, on 19/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Canon\BJCard\Bjmcmng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsCtrls.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\AntiSpam\pskmssvc.exe
c:\program files\panda software\panda platinum 2005 internet security\firewall\PSHOST.EXE
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\psimsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\Canon\BJPV\TVMon.exe
C:\Program Files\Canon\BJCard\BJLaunch.exe
C:\WINDOWS\vsnpstd.exe
C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\issch.exe
C:\Program Files\Windows Live\Contrôle parental\fssui.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\documents and settings\compaq_propriétaire\local settings\application data\qgeke.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\SRVLOAD.EXE
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\WebProxy.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavBckPT.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\avciman.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\psimreal.exe
C:\DOCUME~1\COMPAQ~1\Local Settings\Temporary Internet Files\Content.IE5\YIAA3J48\HiJackThis[1].exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=63&bd=PRESARIO&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=63&bd=PRESARIO&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=63&bd=PRESARIO&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [BJPD HID Control] C:\Program Files\Canon\BJPV\TVMon.exe
O4 - HKLM\..\Run: [BJLaunchEXE] C:\Program Files\Canon\BJCard\BJLaunch.exe
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB002" /M "Stylus DX4800"

Voilà la suite de Hijackhis :

O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\issch.exe" -start
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
O4 - HKLM\..\Run: [1 mags 16 more] C:\Documents and Settings\All Users\Application Data\Admin Inter 1 Mags\loud download.exe
O4 - HKLM\..\RunServices: [PANDA ANTISPAM SERVER SERVICE] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PasSrv.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /M "Stylus DX4800" /EF "HKCU"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [IsaCpg.exe] C:\Program files\Ditoo\IsaCpg.exe
O4 - HKCU\..\Run: [Remote Great] C:\DOCUME~1\COMPAQ~1\APPLIC~1\PLATFO~1\MoveSlow.exe
O4 - HKCU\..\Run: [qgeke] "c:\documents and settings\compaq_propriétaire\local settings\application data\qgeke.exe" qgeke
O4 - HKCU\..\Run: [sokms] c:\documents and settings\compaq_propriétaire\local settings\application data\sokms.exe sokms
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1159530351258
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://www.celig.dyndns.org/activex/AMC.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{77B20F94-3DC2-4FAA-89EC-C898AA656A96}: NameServer = 80.10.246.2,80.10.246.129
O18 - Protocol: marge - {4FEC9AA5-E7A9-42BB-B715-B26161FEEE39} - C:\Isamgwp\IsaMgwIE.ocx
O18 - Protocol: troupeau - {80477DC2-CDF6-41BA-8A5F-56A17CE26EB9} - C:\IsaPrwp\prwNetIE.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Canon BJ Memory Card Manager (Bjmcmng) - CANON INC. - C:\Program Files\Canon\BJCard\Bjmcmng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
O23 - Service: Panda Antispam Engine (pmshellsrv) - Panda Software International - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\AntiSpam\pskmssvc.exe
O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\program files\panda software\panda platinum 2005 internet security\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\psimsvc.exe
O24 - Desktop Component 0: (no name) - http://www.agranet.fr/Agranet/images/bandeau_haut_logo.gif
O24 - Desktop Component 1: (no name) - http://www.agranet.fr/agranet/images/fond_acc_1024.gif
O24 - Desktop Component 3: (no name) - http://www.ca-illeetvilaine.fr/Vitrine/ModExt/FO/Agence/VotreAgence.jsp

--
End of file - 16130 bytes

Voilà maintenant le rapport de lopR :
Première partie :

--------------------\\ Lop S&D 4.2.3-1 XP/Vista

"C:\Lop SD" ( MAJ : 19-08-2008|02:08 )
Option : [1] ( 19/08/2008|13:07 )

--------------------\\ Listing des dossiers dans APPLIC~1

[04/03/2008|20:29] C:\DOCUME~1\AGNS~1\APPLIC~1\Adobe
[04/03/2008|20:30] C:\DOCUME~1\AGNS~1\APPLIC~1\AdobeUM
[22/02/2008|12:55] C:\DOCUME~1\AGNS~1\APPLIC~1\CyberLink
[23/11/2004|17:13] C:\DOCUME~1\AGNS~1\APPLIC~1\desktop.ini
[13/04/2008|09:53] C:\DOCUME~1\AGNS~1\APPLIC~1\EPSON
[21/02/2008|20:47] C:\DOCUME~1\AGNS~1\APPLIC~1\Google
[09/06/2008|19:58] C:\DOCUME~1\AGNS~1\APPLIC~1\HP
[24/03/2008|22:21] C:\DOCUME~1\AGNS~1\APPLIC~1\HPQ
[27/10/2005|00:34] C:\DOCUME~1\AGNS~1\APPLIC~1\Identities
[21/02/2008|20:51] C:\DOCUME~1\AGNS~1\APPLIC~1\Macromedia
[25/03/2008|19:46] C:\DOCUME~1\AGNS~1\APPLIC~1\Microsoft
[02/01/2006|22:51] C:\DOCUME~1\AGNS~1\APPLIC~1\Real
[23/02/2008|20:04] C:\DOCUME~1\AGNS~1\APPLIC~1\Sun
[21/04/2008|19:28] C:\DOCUME~1\AGNS~1\APPLIC~1\VMNTOOLBAR

[16/08/2008|12:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags
[27/05/2008|22:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[16/09/2007|10:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[09/02/2008|01:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[01/08/2008|00:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[18/07/2008|08:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Backup
[09/10/2007|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[23/11/2004|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[25/10/2006|21:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[02/01/2006|23:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[02/01/2006|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[02/01/2006|22:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[09/02/2008|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[08/02/2008|22:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[16/05/2007|22:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[16/05/2007|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[02/01/2006|22:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[27/12/2007|16:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sentinel
[02/01/2006|22:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[12/03/2008|12:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[29/09/2006|16:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[21/05/2007|14:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[29/09/2006|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[15/07/2008|19:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[17/03/2007|23:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[27/01/2008|11:54] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Adobe
[27/05/2008|22:28] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AdobeUM
[16/05/2007|15:47] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Apple Computer
[04/10/2006|10:41] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ArcSoft
[01/08/2008|00:11] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AVS4YOU
[18/10/2006|11:36] C:\DOCUME~1\COMPAQ~1\APPLIC~1\CyberLink
[23/11/2004|17:13] C:\DOCUME~1\COMPAQ~1\APPLIC~1\desktop.ini
[04/06/2007|14:05] C:\DOCUME~1\COMPAQ~1\APPLIC~1\EPSON
[26/10/2006|11:50] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Google
[10/10/2006|14:49] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Help
[01/03/2007|20:53] C:\DOCUME~1\COMPAQ~1\APPLIC~1\HP
[06/10/2006|17:29] C:\DOCUME~1\COMPAQ~1\APPLIC~1\HPQ
[27/10/2005|00:34] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Identities
[07/10/2006|18:18] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Leadertech
[12/08/2008|22:59] C:\DOCUME~1\COMPAQ~1\APPLIC~1\LimeWire
[31/03/2007|23:09] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Macromedia
[12/07/2008|23:42] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Microsoft
[25/04/2008|00:14] C:\DOCUME~1\COMPAQ~1\APPLIC~1\MSNInstaller
[16/08/2008|12:17] C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup
[05/08/2008|11:43] C:\DOCUME~1\COMPAQ~1\APPLIC~1\PTV AG
[09/10/2007|18:54] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Real
[18/02/2007|18:55] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sonic
[26/04/2007|22:23] C:\DOCUME~1\COMPAQ~1\APPLIC~1\STOIK
[12/10/2006|17:46] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sun
[14/05/2008|14:25] C:\DOCUME~1\COMPAQ~1\APPLIC~1\teamspeak2
[09/01/2007|21:18] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Template
[16/08/2008|16:36] C:\DOCUME~1\COMPAQ~1\APPLIC~1\U3
[04/02/2007|13:21] C:\DOCUME~1\COMPAQ~1\APPLIC~1\wklnhst.dat

[23/11/2004|17:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[27/10/2005|00:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[02/01/2006|23:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/01/2006|22:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real

[12/05/2007|15:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[16/07/2008|07:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[08/08/2008 00:00][--a------] C:\WINDOWS\tasks\Nettoyage de base.job
[18/08/2008 08:19][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
[12/08/2008 09:19][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[19/08/2008 11:01][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 13:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[03/04/2007|10:54] C:\Program Files\Adobe
[31/05/2008|10:24] C:\Program Files\Apple Software Update
[04/10/2006|10:33] C:\Program Files\ArcSoft
[20/01/2008|11:33] C:\Program Files\Atari
[02/01/2006|22:44] C:\Program Files\ATI Technologies
[25/04/2007|19:43] C:\Program Files\aucune enplification
[04/10/2006|11:15] C:\Program Files\AvantGo Connect
[05/08/2008|11:51] C:\Program Files\AVS4YOU
[11/10/2007|15:22] C:\Program Files\Axis Communications
[04/10/2006|16:59] C:\Program Files\Canon
[30/06/2008|18:07] C:\Program Files\Circle Developement
[04/10/2006|11:15] C:\Program Files\Common Files
[20/10/2005|21:06] C:\Program Files\ComPlus Applications
[03/04/2007|10:55] C:\Program Files\Core Design
[02/01/2006|22:54] C:\Program Files\CyberLink
[14/05/2008|09:49] C:\Program Files\Ditoo
[22/08/2007|22:17] C:\Program Files\DivX
[21/05/2007|14:41] C:\Program Files\EPSON
[05/08/2008|12:11] C:\Program Files\Fichiers communs
[19/02/2008|22:17] C:\Program Files\Google
[02/01/2006|23:18] C:\Program Files\Hewlett-Packard
[09/10/2007|18:52] C:\Program Files\HP
[05/08/2008|11:43] C:\Program Files\InstallShield Installation Information
[15/08/2008|02:16] C:\Program Files\Internet Explorer
[05/10/2006|11:18] C:\Program Files\Isamarge
[05/10/2006|11:14] C:\Program Files\Isapr
[11/08/2007|09:19] C:\Program Files\Java
[01/03/2008|22:48] C:\Program Files\LimeWire
[15/08/2008|02:19] C:\Program Files\Messenger
[15/07/2008|22:23] C:\Program Files\Messenger Plus! Live
[03/06/2008|00:54] C:\Program Files\Microsoft ActiveSync
[27/01/2008|23:30] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[27/10/2005|00:36] C:\Program Files\microsoft frontpage
[29/09/2006|16:30] C:\Program Files\Microsoft Office
[15/07/2008|20:07] C:\Program Files\Microsoft SQL Server Compact Edition
[29/09/2006|16:30] C:\Program Files\Microsoft Visual Studio
[29/09/2006|16:30] C:\Program Files\Microsoft Works
[29/09/2006|16:29] C:\Program Files\Microsoft.NET
[07/11/2007|19:24] C:\Program Files\Minitel
[27/10/2005|00:36] C:\Program Files\Movie Maker
[27/04/2007|18:36] C:\Program Files\MP3 Player Utilities 4.00
[07/11/2007|16:06] C:\Program Files\MSBuild
[01/03/2007|20:55] C:\Program Files\MSN
[27/10/2005|00:36] C:\Program Files\MSN Gaming Zone
[18/11/2006|02:38] C:\Program Files\MSXML 4.0
[07/11/2007|16:09] C:\Program Files\MSXML 6.0
[27/04/2007|19:37] C:\Program Files\MyMPxPlayer.org
[16/05/2007|22:31] C:\Program Files\NCH Software
[18/05/2007|19:10] C:\Program Files\NCH Swift Sound
[21/03/2007|20:14] C:\Program Files\NetMeeting
[17/08/2008|18:00] C:\Program Files\Norton Security Scan
[27/10/2005|00:36] C:\Program Files\Online Services
[19/09/2007|07:26] C:\Program Files\Outlook Express
[02/10/2006|11:56] C:\Program Files\Panda Software
[02/01/2006|23:03] C:\Program Files\PC-Doctor 5 for Windows
[11/01/2008|17:47] C:\Program Files\PhotoFiltre
[16/08/2008|12:17] C:\Program Files\platform style setup
[02/10/2006|17:12] C:\Program Files\Rainbow Technologies
[02/01/2006|22:51] C:\Program Files\Real
[07/11/2007|16:00] C:\Program Files\Reference Assemblies
[02/01/2006|23:06] C:\Program Files\Services en ligne
[05/08/2008|12:11] C:\Program Files\Sonic
[12/03/2008|12:21] C:\Program Files\Spybot - Search & Destroy
[27/04/2007|19:04] C:\Program Files\Total Video Converter
[23/04/2008|20:20] C:\Program Files\Trend Micro
[21/02/2008|17:53] C:\Program Files\UnFREEz
[20/10/2005|21:06] C:\Program Files\Uninstall Information
[13/08/2008|18:15] C:\Program Files\Valve
[08/07/2007|23:16] C:\Program Files\VideoCAM Eye
[20/02/2008|23:28] C:\Program Files\Visicom Media
[10/11/2006|12:09] C:\Program Files\Wanadoo
[26/06/2008|16:03] C:\Program Files\WebMediaPlayer
[18/07/2008|03:03] C:\Program Files\Windows Live
[12/05/2007|15:21] C:\Program Files\Windows Media Connect 2
[03/10/2007|18:55] C:\Program Files\Windows Media Player
[27/10/2005|00:36] C:\Program Files\Windows NT
[20/10/2005|21:05] C:\Program Files\WindowsUpdate
[27/10/2005|00:37] C:\Program Files\xerox
[17/03/2007|23:38] C:\Program Files\Yahoo!

Deuxième partie :

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[27/05/2008|22:30] C:\Program Files\Fichiers communs\Adobe
[16/09/2007|10:28] C:\Program Files\Fichiers communs\Apple
[05/08/2008|11:51] C:\Program Files\Fichiers communs\AVSMedia
[03/10/2006|15:32] C:\Program Files\Fichiers communs\Borland Shared
[29/09/2006|16:30] C:\Program Files\Fichiers communs\DESIGNER
[02/01/2006|22:48] C:\Program Files\Fichiers communs\HP
[04/10/2006|10:27] C:\Program Files\Fichiers communs\InstallShield
[02/01/2006|22:32] C:\Program Files\Fichiers communs\Java
[01/08/2008|00:05] C:\Program Files\Fichiers communs\Microsoft Shared
[27/10/2005|00:35] C:\Program Files\Fichiers communs\MSSoap
[27/10/2005|00:35] C:\Program Files\Fichiers communs\ODBC
[04/10/2006|10:01] C:\Program Files\Fichiers communs\Panda Software
[09/10/2007|18:54] C:\Program Files\Fichiers communs\Real
[27/10/2005|00:35] C:\Program Files\Fichiers communs\Services
[02/01/2006|22:52] C:\Program Files\Fichiers communs\Sonic Shared
[27/10/2005|00:35] C:\Program Files\Fichiers communs\SpeechEngines
[02/01/2006|22:52] C:\Program Files\Fichiers communs\SureThing Shared
[17/08/2008|18:07] C:\Program Files\Fichiers communs\Symantec Shared
[19/09/2007|07:26] C:\Program Files\Fichiers communs\System
[08/07/2007|23:16] C:\Program Files\Fichiers communs\VCAMEye
[08/02/2008|22:08] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 61 Processus )

iexplore.exe ~ [PID:3580] ~ [Threads:9]
iexplore.exe ~ [PID:2916] ~ [Threads:12]
iexplore.exe ~ [PID:2240] ~ [Threads:42]

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\bis11E.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\bis1E.exe

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags\Bias Dale.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags\loud download.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup
C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\dolkkhbq.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\DownloadBash01Idol.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\fikjjpms.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\hopeproxydoes.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\MoveSlow.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\tygwgbcr.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\vqymvpqm.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\whppbxcg.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\zmybwmdx.exe
C:\Program Files\platform style setup
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@advertstream[2].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@adin.bigpoint[1].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@bigpoint[2].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.bigpoint[2].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr1.darkorbit.bigpoint[1].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@banner.cotedazurpalace[2].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@cotedazurpalace[1].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@adopt.euroclick[1].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@partypoker[1].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@32vegas[1].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@banner.32vegas[2].txt

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"1 mags 16 more"="C:\\Documents and Settings\\All Users\\Application Data\\Admin Inter 1 Mags\\loud download.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-19 13:08:19
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 389

--------------------\\ Recherche d'autres infections

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"sokms"="c:\\documents and settings\\compaq_propri‚taire\\local settings\\application data\\sokms.exe sokms"

C:\Program Files\WebMediaPlayer
C:\Program Files\WebMediaPlayer\resources
C:\Program Files\WebMediaPlayer\skins
C:\Program Files\WebMediaPlayer\sqlite3.dll
C:\Program Files\WebMediaPlayer\uninst.exe
C:\Program Files\WebMediaPlayer\updates
C:\Program Files\WebMediaPlayer\WebMediaPlayer.exe
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer\Conditions g‚n‚rales.url
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer\Confidentialit‚.url
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer\D‚sinstaller.lnk
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer\WebMediaPlayer.lnk
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer\Website.url

C:\DOCUME~1\COMPAQ~1\LOCALS~1\APPLIC~1\qgeke.dat
C:\DOCUME~1\COMPAQ~1\LOCALS~1\APPLIC~1\qgeke.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\APPLIC~1\qgeke_nav.dat
C:\DOCUME~1\COMPAQ~1\LOCALS~1\APPLIC~1\qgeke_navps.dat
C:\WINDOWS\Prefetch\QGEKE.EXE-35E841FE.pf
==> EGDACCESS <==

[F:1386][D:34]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
[F:840][D:0]-> C:\DOCUME~1\COMPAQ~1\Cookies
[F:20938][D:28]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 13:11:57

Nettoyage :
Relance Lop S&D

* Choisis cette fois ci l'Option 2 ( Suppression )
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré ( C:\lopR.txt )
( Si le Bureau ne réapparît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )

Télécharge Navilog1 de IL-MAFIOSO : http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistre-le sur ton Bureau.

Double clique sur navilog1.exe pour lancer l'installation.

Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le Bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valide.

(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message : *** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir. Enregistre le rapport sur ton Bureau.

Poste le rapport dans ta prochaine réponse.

Note : Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
_________________
Choisis ton antivirus grâce à AV-Comparatives |un doute scan sur Virustotal | Hijackthis
Rapport de grande taille clique ici

Voilà le nouveau rapport de LopS&D :
Première partie :

--------------------\\ Lop S&D 4.2.3-1 XP/Vista

"C:\Lop SD" ( MAJ : 19-08-2008|02:08 )
Option : [2] ( 19/08/2008|14:59 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags\Bias Dale.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags\loud download.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\dolkkhbq.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\DownloadBash01Idol.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\fikjjpms.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\hopeproxydoes.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\MoveSlow.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\tygwgbcr.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\vqymvpqm.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\whppbxcg.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup\zmybwmdx.exe
Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@advertstream[2].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@adin.bigpoint[1].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@bigpoint[2].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.bigpoint[2].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr1.darkorbit.bigpoint[1].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr1.seafight.bigpoint[1].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@banner.cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@cotedazurpalace[1].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@partypoker[1].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@32vegas[1].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@banner.32vegas[2].txt
Supprime! - C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\bis11E.exe
Supprime! - C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\bis1E.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags
Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\platform style setup
Supprime! - C:\Program Files\platform style setup
Supprime! - C:\Program Files\Circle Developement

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[04/03/2008|20:29] C:\DOCUME~1\AGNS~1\APPLIC~1\Adobe
[04/03/2008|20:30] C:\DOCUME~1\AGNS~1\APPLIC~1\AdobeUM
[22/02/2008|12:55] C:\DOCUME~1\AGNS~1\APPLIC~1\CyberLink
[23/11/2004|17:13] C:\DOCUME~1\AGNS~1\APPLIC~1\desktop.ini
[13/04/2008|09:53] C:\DOCUME~1\AGNS~1\APPLIC~1\EPSON
[21/02/2008|20:47] C:\DOCUME~1\AGNS~1\APPLIC~1\Google
[09/06/2008|19:58] C:\DOCUME~1\AGNS~1\APPLIC~1\HP
[24/03/2008|22:21] C:\DOCUME~1\AGNS~1\APPLIC~1\HPQ
[27/10/2005|00:34] C:\DOCUME~1\AGNS~1\APPLIC~1\Identities
[21/02/2008|20:51] C:\DOCUME~1\AGNS~1\APPLIC~1\Macromedia
[25/03/2008|19:46] C:\DOCUME~1\AGNS~1\APPLIC~1\Microsoft
[02/01/2006|22:51] C:\DOCUME~1\AGNS~1\APPLIC~1\Real
[23/02/2008|20:04] C:\DOCUME~1\AGNS~1\APPLIC~1\Sun
[21/04/2008|19:28] C:\DOCUME~1\AGNS~1\APPLIC~1\VMNTOOLBAR

[27/05/2008|22:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[16/09/2007|10:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[09/02/2008|01:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[01/08/2008|00:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[18/07/2008|08:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Backup
[09/10/2007|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[23/11/2004|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[25/10/2006|21:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[02/01/2006|23:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[02/01/2006|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[02/01/2006|22:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[09/02/2008|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[08/02/2008|22:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[16/05/2007|22:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[16/05/2007|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[02/01/2006|22:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[27/12/2007|16:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sentinel
[02/01/2006|22:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[12/03/2008|12:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[29/09/2006|16:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[21/05/2007|14:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[29/09/2006|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[15/07/2008|19:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[17/03/2007|23:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[27/01/2008|11:54] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Adobe
[27/05/2008|22:28] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AdobeUM
[16/05/2007|15:47] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Apple Computer
[04/10/2006|10:41] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ArcSoft
[01/08/2008|00:11] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AVS4YOU
[18/10/2006|11:36] C:\DOCUME~1\COMPAQ~1\APPLIC~1\CyberLink
[23/11/2004|17:13] C:\DOCUME~1\COMPAQ~1\APPLIC~1\desktop.ini
[04/06/2007|14:05] C:\DOCUME~1\COMPAQ~1\APPLIC~1\EPSON
[26/10/2006|11:50] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Google
[10/10/2006|14:49] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Help
[01/03/2007|20:53] C:\DOCUME~1\COMPAQ~1\APPLIC~1\HP
[06/10/2006|17:29] C:\DOCUME~1\COMPAQ~1\APPLIC~1\HPQ
[27/10/2005|00:34] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Identities
[07/10/2006|18:18] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Leadertech
[12/08/2008|22:59] C:\DOCUME~1\COMPAQ~1\APPLIC~1\LimeWire
[31/03/2007|23:09] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Macromedia
[12/07/2008|23:42] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Microsoft
[25/04/2008|00:14] C:\DOCUME~1\COMPAQ~1\APPLIC~1\MSNInstaller
[05/08/2008|11:43] C:\DOCUME~1\COMPAQ~1\APPLIC~1\PTV AG
[09/10/2007|18:54] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Real
[18/02/2007|18:55] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sonic
[26/04/2007|22:23] C:\DOCUME~1\COMPAQ~1\APPLIC~1\STOIK
[12/10/2006|17:46] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sun
[14/05/2008|14:25] C:\DOCUME~1\COMPAQ~1\APPLIC~1\teamspeak2
[09/01/2007|21:18] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Template
[16/08/2008|16:36] C:\DOCUME~1\COMPAQ~1\APPLIC~1\U3
[04/02/2007|13:21] C:\DOCUME~1\COMPAQ~1\APPLIC~1\wklnhst.dat

[23/11/2004|17:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[27/10/2005|00:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[02/01/2006|23:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/01/2006|22:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real

[12/05/2007|15:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[16/07/2008|07:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[08/08/2008 00:00][--a------] C:\WINDOWS\tasks\Nettoyage de base.job
[18/08/2008 08:19][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
[12/08/2008 09:19][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[19/08/2008 11:01][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 13:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

Deuxième partie :

--------------------\\ Listing des dossiers dans C:\Program Files

[03/04/2007|10:54] C:\Program Files\Adobe
[31/05/2008|10:24] C:\Program Files\Apple Software Update
[04/10/2006|10:33] C:\Program Files\ArcSoft
[20/01/2008|11:33] C:\Program Files\Atari
[02/01/2006|22:44] C:\Program Files\ATI Technologies
[25/04/2007|19:43] C:\Program Files\aucune enplification
[04/10/2006|11:15] C:\Program Files\AvantGo Connect
[05/08/2008|11:51] C:\Program Files\AVS4YOU
[11/10/2007|15:22] C:\Program Files\Axis Communications
[04/10/2006|16:59] C:\Program Files\Canon
[04/10/2006|11:15] C:\Program Files\Common Files
[20/10/2005|21:06] C:\Program Files\ComPlus Applications
[03/04/2007|10:55] C:\Program Files\Core Design
[02/01/2006|22:54] C:\Program Files\CyberLink
[14/05/2008|09:49] C:\Program Files\Ditoo
[22/08/2007|22:17] C:\Program Files\DivX
[21/05/2007|14:41] C:\Program Files\EPSON
[05/08/2008|12:11] C:\Program Files\Fichiers communs
[19/02/2008|22:17] C:\Program Files\Google
[02/01/2006|23:18] C:\Program Files\Hewlett-Packard
[09/10/2007|18:52] C:\Program Files\HP
[05/08/2008|11:43] C:\Program Files\InstallShield Installation Information
[15/08/2008|02:16] C:\Program Files\Internet Explorer
[05/10/2006|11:18] C:\Program Files\Isamarge
[05/10/2006|11:14] C:\Program Files\Isapr
[11/08/2007|09:19] C:\Program Files\Java
[01/03/2008|22:48] C:\Program Files\LimeWire
[15/08/2008|02:19] C:\Program Files\Messenger
[15/07/2008|22:23] C:\Program Files\Messenger Plus! Live
[03/06/2008|00:54] C:\Program Files\Microsoft ActiveSync
[27/01/2008|23:30] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[27/10/2005|00:36] C:\Program Files\microsoft frontpage
[29/09/2006|16:30] C:\Program Files\Microsoft Office
[15/07/2008|20:07] C:\Program Files\Microsoft SQL Server Compact Edition
[29/09/2006|16:30] C:\Program Files\Microsoft Visual Studio
[29/09/2006|16:30] C:\Program Files\Microsoft Works
[29/09/2006|16:29] C:\Program Files\Microsoft.NET
[07/11/2007|19:24] C:\Program Files\Minitel
[27/10/2005|00:36] C:\Program Files\Movie Maker
[27/04/2007|18:36] C:\Program Files\MP3 Player Utilities 4.00
[07/11/2007|16:06] C:\Program Files\MSBuild
[01/03/2007|20:55] C:\Program Files\MSN
[27/10/2005|00:36] C:\Program Files\MSN Gaming Zone
[18/11/2006|02:38] C:\Program Files\MSXML 4.0
[07/11/2007|16:09] C:\Program Files\MSXML 6.0
[27/04/2007|19:37] C:\Program Files\MyMPxPlayer.org
[16/05/2007|22:31] C:\Program Files\NCH Software
[18/05/2007|19:10] C:\Program Files\NCH Swift Sound
[21/03/2007|20:14] C:\Program Files\NetMeeting
[17/08/2008|18:00] C:\Program Files\Norton Security Scan
[27/10/2005|00:36] C:\Program Files\Online Services
[19/09/2007|07:26] C:\Program Files\Outlook Express
[02/10/2006|11:56] C:\Program Files\Panda Software
[02/01/2006|23:03] C:\Program Files\PC-Doctor 5 for Windows
[11/01/2008|17:47] C:\Program Files\PhotoFiltre
[02/10/2006|17:12] C:\Program Files\Rainbow Technologies
[02/01/2006|22:51] C:\Program Files\Real
[07/11/2007|16:00] C:\Program Files\Reference Assemblies
[02/01/2006|23:06] C:\Program Files\Services en ligne
[05/08/2008|12:11] C:\Program Files\Sonic
[12/03/2008|12:21] C:\Program Files\Spybot - Search & Destroy
[27/04/2007|19:04] C:\Program Files\Total Video Converter
[23/04/2008|20:20] C:\Program Files\Trend Micro
[21/02/2008|17:53] C:\Program Files\UnFREEz
[20/10/2005|21:06] C:\Program Files\Uninstall Information
[13/08/2008|18:15] C:\Program Files\Valve
[08/07/2007|23:16] C:\Program Files\VideoCAM Eye
[20/02/2008|23:28] C:\Program Files\Visicom Media
[10/11/2006|12:09] C:\Program Files\Wanadoo
[26/06/2008|16:03] C:\Program Files\WebMediaPlayer
[18/07/2008|03:03] C:\Program Files\Windows Live
[12/05/2007|15:21] C:\Program Files\Windows Media Connect 2
[03/10/2007|18:55] C:\Program Files\Windows Media Player
[27/10/2005|00:36] C:\Program Files\Windows NT
[20/10/2005|21:05] C:\Program Files\WindowsUpdate
[27/10/2005|00:37] C:\Program Files\xerox
[17/03/2007|23:38] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[27/05/2008|22:30] C:\Program Files\Fichiers communs\Adobe
[16/09/2007|10:28] C:\Program Files\Fichiers communs\Apple
[05/08/2008|11:51] C:\Program Files\Fichiers communs\AVSMedia
[03/10/2006|15:32] C:\Program Files\Fichiers communs\Borland Shared
[29/09/2006|16:30] C:\Program Files\Fichiers communs\DESIGNER
[02/01/2006|22:48] C:\Program Files\Fichiers communs\HP
[04/10/2006|10:27] C:\Program Files\Fichiers communs\InstallShield
[02/01/2006|22:32] C:\Program Files\Fichiers communs\Java
[01/08/2008|00:05] C:\Program Files\Fichiers communs\Microsoft Shared
[27/10/2005|00:35] C:\Program Files\Fichiers communs\MSSoap
[27/10/2005|00:35] C:\Program Files\Fichiers communs\ODBC
[04/10/2006|10:01] C:\Program Files\Fichiers communs\Panda Software
[09/10/2007|18:54] C:\Program Files\Fichiers communs\Real
[27/10/2005|00:35] C:\Program Files\Fichiers communs\Services
[02/01/2006|22:52] C:\Program Files\Fichiers communs\Sonic Shared
[27/10/2005|00:35] C:\Program Files\Fichiers communs\SpeechEngines
[02/01/2006|22:52] C:\Program Files\Fichiers communs\SureThing Shared
[17/08/2008|18:07] C:\Program Files\Fichiers communs\Symantec Shared
[19/09/2007|07:26] C:\Program Files\Fichiers communs\System
[08/07/2007|23:16] C:\Program Files\Fichiers communs\VCAMEye
[08/02/2008|22:08] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 57 Processus )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@adopt.euroclick[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-19 15:00:51
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 389

--------------------\\ Recherche d'autres infections

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"sokms"="c:\\documents and settings\\compaq_propri‚taire\\local settings\\application data\\sokms.exe sokms"

C:\Program Files\WebMediaPlayer
C:\Program Files\WebMediaPlayer\resources
C:\Program Files\WebMediaPlayer\skins
C:\Program Files\WebMediaPlayer\sqlite3.dll
C:\Program Files\WebMediaPlayer\uninst.exe
C:\Program Files\WebMediaPlayer\updates
C:\Program Files\WebMediaPlayer\WebMediaPlayer.exe
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer\Conditions g‚n‚rales.url
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer\Confidentialit‚.url
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer\D‚sinstaller.lnk
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer\WebMediaPlayer.lnk
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\WebMediaPlayer\Website.url

C:\DOCUME~1\COMPAQ~1\LOCALS~1\APPLIC~1\qgeke.dat
C:\DOCUME~1\COMPAQ~1\LOCALS~1\APPLIC~1\qgeke.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\APPLIC~1\qgeke_nav.dat
C:\DOCUME~1\COMPAQ~1\LOCALS~1\APPLIC~1\qgeke_navps.dat
==> EGDACCESS <==

[F:1383][D:34]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
[F:830][D:0]-> C:\DOCUME~1\COMPAQ~1\Cookies
[F:18663][D:28]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 15:03:48

J'ai un problème ! Quand je clique sur "navilog1.exe, il lance l'installation de Navilog1, j'accepte les termes du contrat, je coche "faire une icone sur le bureau", l'installation dure une seconde, et après rien ne se passe... il n'y a pas de nouvelle icone "Navilog1" sur le bureau...

j'attend le suivant ;-D
désinstalle le via le panneau de configuration si il y existe

regarde dans c:\programfile\navilog1 si présent supprime le repertoire et recommence.

si il s'installe et toujours pas de raccourcis ouvre le et clique sur "C:\Program Files\Navilog1\navilog1.bat"
_________________
Choisis ton antivirus grâce à AV-Comparatives |un doute scan sur Virustotal | Hijackthis
Rapport de grande taille clique ici

Search Navipromo version 3.6.4 commencé le 19/08/2008 à 16:07:22,35

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Compaq_Propriétaire"

Mise à jour le 16.08.2008 à 22h00 par IL-MAFIOSO

Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit
WebMediaPlayer

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

...\WebMediaPlayer trouvé !

*** Recherche dossiers dans "C:\DOCUME~1\ALLUSE~1\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ALLUSE~1\menudm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\COMPAQ~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\AGNS~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\COMPAQ~1\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOC