salut j'ai des fenetres publicitaires qui s'ouvre tout le temps et c'est trés chiant , il faut faire quoi pour que ca s'arrete ? merci

pour commencer, un log hijackthis

y a un logiciel qui s'appelle hijackthis, tu peux le télécharger, l'installer, et faire un log et tu le poste ici en attendant la venue de ceux qui s'y connaissent

Salut,

- Télécharge Hijackthis V 2.02 (HijackThis Installer) :
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

- Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

- Clique sur Install ensuite sur I Accept

- Clique sur Do a scan system and save log file

- Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.

c'est un nom un peu douteux je trouve ...

TrendSecure c'est un éditeur assez connu quand même ...

Il n'y a pas de risque, c'est un soft utilisé sur bon nombre de forum de sécu. A la différence près qu'ici ce n'est pas un forum de sécu ...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:17:52, on 02/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\Msmsgs.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kontiki\KService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\TRENDnet\TEW-424UB\SiSWLSvc.exe
C:\Program Files\TRENDnet\TEW-424UB\TRENDnet.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre1.6.0\bin\jucheck.exe
C:\Program Files\Windows Media Player\wmplayer.exe
E:\autorun.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/search?q=%s
R1 -
HKCU\Software\Microsoft\Windows\CurrentVersion\Int
ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program
Files\Google\GoogleToolbarNotifier\2.1.1119.1736\s
wg.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [Cool Memo First Boob] C:\Documents and Settings\All Users\Application Data\Bleh kind cool memo\Great thunk.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\Msmsgs.exe" /background
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O4 - HKCU\..\Run: [mpeg knob] C:\DOCUME~1\ben\APPLIC~1\GREYTH~1\Remotekeep.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Srchasst" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_02] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\msagent" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_03] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Help\Tours" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_04] cmd.exe /c md "%USERPROFILE%\Local Settings\Temp" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_05] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_06] rundll32 advpack.dll,LaunchINFSection nlite.inf,nLiteReg (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_07] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Srchasst" (User 'SERVICE RÉSEAU')
O4 - Startup: Enregistrement d'un produit Delta Force-Black Hawk Down Team Sabre.lnk = C:\Documents and Settings\ben\Local
Settings\Temp\{0926F9FA-8F3E-48DB-BDAE-8E64523B685
E}\{6164D2E7-986B-42F5-B3A6-64D5E53FB889}\NOVG.EXE

O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: SnagIt 8.lnk = C:\Program Files\TechSmith\SnagIt 8\SnagIt32.exe
O4 - Global Startup: Wireless Configuration Utility HW.32.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mmail/w2/resources/MSNPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://ratsauvage31.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/FacebookPhotoUploader4_5.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - C:\Program Files\TRENDnet\TEW-424UB\SiSWLSvc.exe

--
End of file - 10002 bytes

sans aucun doute tu es infecté

commences par désinstaller tes toolbars

C'est marrant les pubs CID, non ?

---> Désactive l'antivirus
---> Télécharge Lop S&D sur ton Bureau
http://eric.71.mespages.googlepages.com/LopSD.exe
---> Double-clique dessus pour lancer l'installation
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
---> Patiente jusqu'à la fin du scan
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Si tu as un problème pour utiliser Lop S&D, regarde dans le tutorial :
http://bibou0007.com/outils-specifiques-f78/tutorial-lop-sd-t956.htm#11431

comme le message est trop long je le fait en 2 parties

-----------------------[ Lop S&D 4.2.0-3 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : ben ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 02/05/2008 | 19:28:53,20 ] [ PC : BEN-6562AAF6EB0 ]
[ MAJ : 30-04-2008 | 18:35 ]

-------------[ Listing des dossiers dans Application Data ]------------

[15/08/2007|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[31/08/2007|22:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[23/09/2007|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[12/04/2008|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bleh kind cool memo
[12/02/2008|00:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Channel4
[15/08/2007|13:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[15/08/2007|12:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[02/05/2008|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[02/05/2008|19:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kontiki
[13/04/2008|13:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[15/09/2007|21:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[28/12/2007|21:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[28/08/2007|22:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
[22/04/2008|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TechSmith
[22/03/2008|16:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[19/01/2008|13:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[02/03/2008|23:37] C:\DOCUME~1\ben\APPLIC~1\.bittorrent
[06/04/2008|23:02] C:\DOCUME~1\ben\APPLIC~1\Adobe
[26/08/2007|21:44] C:\DOCUME~1\ben\APPLIC~1\AdobeUM
[02/10/2007|21:50] C:\DOCUME~1\ben\APPLIC~1\ALLCapture
[23/09/2007|18:30] C:\DOCUME~1\ben\APPLIC~1\Apple Computer
[11/02/2008|20:13] C:\DOCUME~1\ben\APPLIC~1\BSplayer
[11/02/2008|19:48] C:\DOCUME~1\ben\APPLIC~1\BSplayer Pro
[14/04/2008|15:05] C:\DOCUME~1\ben\APPLIC~1\DAEMON Tools
[15/08/2007|13:13] C:\DOCUME~1\ben\APPLIC~1\desktop.ini
[09/09/2007|16:53] C:\DOCUME~1\ben\APPLIC~1\DivX
[15/08/2007|13:57] C:\DOCUME~1\ben\APPLIC~1\Google
[12/04/2008|16:51] C:\DOCUME~1\ben\APPLIC~1\Greythunkcast
[15/08/2007|11:41] C:\DOCUME~1\ben\APPLIC~1\Identities
[28/12/2007|22:16] C:\DOCUME~1\ben\APPLIC~1\InfraRecorder
[17/04/2008|23:47] C:\DOCUME~1\ben\APPLIC~1\Leadertech
[15/12/2007|14:06] C:\DOCUME~1\ben\APPLIC~1\LimeWire
[15/08/2007|11:40] C:\DOCUME~1\ben\APPLIC~1\Macromedia
[28/08/2007|22:46] C:\DOCUME~1\ben\APPLIC~1\Media Player Classic
[14/04/2008|15:14] C:\DOCUME~1\ben\APPLIC~1\Microsoft
[15/08/2007|17:27] C:\DOCUME~1\ben\APPLIC~1\Mozilla
[23/04/2008|13:16] C:\DOCUME~1\ben\APPLIC~1\OpenOffice.org2
[20/01/2008|18:12] C:\DOCUME~1\ben\APPLIC~1\Real
[18/08/2007|01:41] C:\DOCUME~1\ben\APPLIC~1\Sun
[07/10/2007|20:40] C:\DOCUME~1\ben\APPLIC~1\SystemRequirementsLab
[12/04/2008|17:05] C:\DOCUME~1\ben\APPLIC~1\uTorrent
[04/04/2008|15:26] C:\DOCUME~1\ben\APPLIC~1\vlc
[18/08/2007|14:12] C:\DOCUME~1\ben\APPLIC~1\WinRAR

[15/08/2007|13:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[31/01/2008|15:31] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[15/08/2007|11:23] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[15/08/2007|11:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[15/08/2007|11:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[02/05/2008 19:00][--ah-----] C:\WINDOWS\tasks\A622CA56909D4146.job
[02/05/2008 17:35][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

A622CA56909D4146.job <-->
c:\docume~1\ben\applic~1\greyth~1\OOZESIZEBAT.exe

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[15/08/2007|11:39] C:\Program Files\Adobe
[28/12/2007|22:39] C:\Program Files\Ahead
[02/10/2007|21:52] C:\Program Files\ALLCapture 2.0 Essai
[23/09/2007|18:30] C:\Program Files\Apple Software Update
[20/03/2008|01:13] C:\Program Files\AviSynth 2.5
[12/04/2008|17:04] C:\Program Files\BitDownload
[19/02/2008|23:32] C:\Program Files\BitTorrent
[23/01/2008|22:58] C:\Program Files\Bonjour
[27/03/2008|13:25] C:\Program Files\Call of Duty Game of the Year Edition
[12/02/2008|00:40] C:\Program Files\Channel4
[15/08/2007|12:33] C:\Program Files\C-Media
[15/08/2007|11:20] C:\Program Files\ComPlus Applications
[17/04/2008|01:36] C:\Program Files\DAEMON Tools
[18/08/2007|15:02] C:\Program Files\DivX
[29/10/2007|20:24] C:\Program Files\DS-Monkey Audio Source
[17/04/2008|01:38] C:\Program Files\EA GAMES
[02/05/2008|19:07] C:\Program Files\eMule
[20/03/2008|01:13] C:\Program Files\eRightSoft
[13/04/2008|13:22] C:\Program Files\Fichiers communs
[28/03/2008|13:52] C:\Program Files\Fox
[25/11/2007|14:57] C:\Program Files\Free iPod Video Converter
[06/02/2008|23:08] C:\Program Files\Full Tilt Poker
[25/04/2008|20:17] C:\Program Files\Google
[12/04/2008|16:51] C:\Program Files\Greythunkcast
[27/04/2008|14:05] C:\Program Files\InstallShield Installation Information
[15/08/2007|11:32] C:\Program Files\Internet Explorer
[23/01/2008|22:58] C:\Program Files\iPod
[23/01/2008|22:59] C:\Program Files\iTunes
[23/09/2007|15:55] C:\Program Files\Java
[15/08/2007|11:30] C:\Program Files\JEUX
[20/02/2008|02:57] C:\Program Files\Kontiki
[13/04/2008|13:22] C:\Program Files\Lavasoft
[09/12/2007|19:06] C:\Program Files\LimeWire
[02/09/2007|16:12] C:\Program Files\Logitech
[28/08/2007|22:46] C:\Program Files\Media Player Classic
[15/08/2007|11:38] C:\Program Files\Messenger
[15/08/2007|11:25] C:\Program Files\microsoft frontpage
[15/08/2007|11:36] C:\Program Files\Microsoft Office
[15/08/2007|11:21] C:\Program Files\Movie Maker
[02/05/2008|19:16] C:\Program Files\Mozilla Firefox
[15/08/2007|11:20] C:\Program Files\MSN Gaming Zone
[03/09/2007|13:17] C:\Program Files\MSN Messenger
[15/08/2007|11:22] C:\Program Files\NetMeeting
[09/04/2008|16:41] C:\Program Files\Neuf
[23/09/2007|15:55] C:\Program Files\OpenOffice.org 2.2
[15/08/2007|11:22] C:\Program Files\Outlook Express
[15/08/2007|11:38] C:\Program Files\Photo Story 3 for Windows
[19/08/2007|19:34] C:\Program Files\Postal2
[08/02/2008|13:52] C:\Program Files\QuickTime
[20/01/2008|18:12] C:\Program Files\Real
[28/08/2007|22:46] C:\Program Files\Real Alternative
[18/09/2007|20:23] C:\Program Files\Samsung
[23/09/2007|10:22] C:\Program Files\Smart Projects
[20/11/2007|19:05] C:\Program Files\Spoed 1 Interactif
[25/12/2007|13:28] C:\Program Files\StuffPlug3
[07/10/2007|20:40] C:\Program Files\SystemRequirementsLab
[22/04/2008|21:56] C:\Program Files\TechSmith
[02/05/2008|17:17] C:\Program Files\Trend Micro
[15/08/2007|11:49] C:\Program Files\TRENDnet
[15/08/2007|11:41] C:\Program Files\Uninstall Information
[15/08/2007|11:30] C:\Program Files\UTILS
[29/11/2007|23:33] C:\Program Files\uTorrent
[04/04/2008|15:20] C:\Program Files\VideoLAN
[19/03/2008|17:44] C:\Program Files\VirtualDub
[11/02/2008|20:13] C:\Program Files\Webteh
[15/08/2007|11:36] C:\Program Files\Windows Journal Viewer
[15/08/2007|11:37] C:\Program Files\Windows Media Components
[20/01/2008|23:36] C:\Program Files\Windows Media Connect 2
[20/01/2008|23:36] C:\Program Files\Windows Media Player
[15/08/2007|11:20] C:\Program Files\Windows NT
[15/08/2007|11:22] C:\Program Files\WindowsUpdate
[18/08/2007|14:08] C:\Program Files\WinRAR
[15/08/2007|11:37] C:\Program Files\WMV9_VCM
[15/08/2007|11:25] C:\Program Files\xerox

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[15/08/2007|11:39] C:\Program Files\Fichiers communs\Adobe
[28/12/2007|22:39] C:\Program Files\Fichiers communs\Ahead
[23/09/2007|18:29] C:\Program Files\Fichiers communs\Apple
[15/09/2007|21:46] C:\Program Files\Fichiers communs\InstallShield
[15/08/2007|11:40] C:\Program Files\Fichiers communs\Java
[02/09/2007|16:12] C:\Program Files\Fichiers communs\Logitech
[15/08/2007|11:36] C:\Program Files\Fichiers communs\Microsoft Shared
[15/08/2007|11:22] C:\Program Files\Fichiers communs\MSSoap
[15/08/2007|13:13] C:\Program Files\Fichiers communs\ODBC
[20/01/2008|18:12] C:\Program Files\Fichiers communs\Real
[15/08/2007|11:22] C:\Program Files\Fichiers communs\Services
[15/08/2007|13:13] C:\Program Files\Fichiers communs\SpeechEngines
[15/08/2007|11:21] C:\Program Files\Fichiers communs\System
[22/04/2008|21:56] C:\Program Files\Fichiers communs\Wise Installation Wizard
[20/01/2008|18:12] C:\Program Files\Fichiers communs\xing shared

---------------------------[ Process ]--------------------------

... 49

IEXPLORE.EXE ~ [312]
IEXPLORE.EXE ~ [448]

----------------------[ Recherche avec S_Lop ]---------------------

C:\DOCUME~1\ben\LOCALS~1\Temp\bis312.exe
C:\DOCUME~1\ben\APPLIC~1\GREYTH~1

C:\DOCUME~1\ben\APPLIC~1\GREYTH~1\OOZESIZEBAT.exe

C:\DOCUME~1\ben\APPLIC~1\GREYTH~1\Remotekeep.exe
C:\DOCUME~1\ben\APPLIC~1\GREYTH~1\viqvfxhj.exe

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ben\APPLIC~1\greyth~1

C:\DOCUME~1\ben\APPLIC~1\greyth~1\OOZESIZEBAT.exe

C:\DOCUME~1\ben\APPLIC~1\greyth~1\Remotekeep.exe
C:\DOCUME~1\ben\APPLIC~1\greyth~1\viqvfxhj.exe
C:\Program Files\greyth~1
C:\Program Files\Bitdownload
C:\Program Files\Bitdownload\session.store
C:\WINDOWS\Tasks\A622CA56909D4146.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curr
entVersion\Uninstall\Hole meet memo]
"DisplayName"="CiD Help"

"UninstallString"="C:\\DOCUME~1\\ben\\APPLIC~1\\GR
EYTH~1\\Remotekeep.exe -uninstall"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curr
entVersion\Run]
"mpeg
knob"="C:\\DOCUME~1\\ben\\APPLIC~1\\GREYTH~1\\Remo
tekeep.exe"
"mpeg
knob"="C:\\DOCUME~1\\ben\\APPLIC~1\\GREYTH~1\\Remo
tekeep.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur
rentVersion\Run]

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww[/i]w.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww[/i]w.errorprotector.com ## added by CiD
127.0.0.1 [i]ww[/i]w.errorsafe.com ## added by CiD
127.0.0.1 [i]ww[/i]w.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww[/i]w.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww[/i]w.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww[/i]w.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww[/i]w.winantispam.com ## added by CiD
127.0.0.1 [i]ww[/i]w.winantispy.com ## added by CiD
127.0.0.1 [i]ww[/i]w.winantispyware.com ## added by CiD
127.0.0.1 [i]ww[/i]w.winantivirus.com ## added by CiD
127.0.0.1 [i]ww[/i]w.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww[/i]w.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww[/i]w.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww[/i]w.winfixer.com ## added by CiD
127.0.0.1 [i]ww[/i]w.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww[/i]w.winsoftware.com ## added by CiD

-> 72 ( 70 ## added by CiD )

/!\ 1 Not 127.0.0.1 !!

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-02 19:30:15
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

=> C:\Documents and Settings\ben\Bureau\concuert\Crck
=> C:\Documents and Settings\ben\Bureau\concuert\Crck\deviance.nfo
=> C:\Documents and Settings\ben\Bureau\concuert\Crck\game.dat
=> C:\Documents and Settings\ben\Bureau\concuert\Crck\generals.exe
=> C:\Documents and
Settings\ben\Bureau\concuert\Crck\Generals_Code.ex
e
=> C:\Documents and Settings\ben\Bureau\telecharg‚s\Fraps 2.9.2 crcked.zip
=> C:\Documents and Settings\ben\Bureau\telecharg‚s\Half Life 2 Fr DVD Version + Patch no Steam + Crck n DVD.ISO
=> C:\Documents and Settings\ben\Bureau\telecharg‚s\Need For Speed 4 High Stakes Ncd Crck.zip
=> C:\Documents and Settings\ben\Bureau\telecharg‚s\Need For Speed 4 Road Challenge Crck OK!.zip
=> C:\Documents and Settings\ben\Bureau\telecharg‚s\PC call of duty 4 francais crck et srial by Kenzo34.rar
=> C:\Documents and Settings\ben\Cookies\ben@crcker.com[1].txt
=> C:\Documents and
Settings\ben\Cookies\ben@ffxcam.cracker.com[2].txt

=> C:\Documents and Settings\ben\Mes documents\Nouveau dossier\Medal Of Honor Allied Assault - Mohaa Ncd Crck v1.11.zip
=> C:\Documents and Settings\ben\Bureau\telecharg‚s\Isobuster Pro v2.2.0.1 Final (Multilanguage)\IsoBuster\kegen.exe
=> C:\Documents and Settings\ben\Bureau\telecharg‚s\[PC GAME - ITA] Command & Conquer Generals\cc_generals-.exe

/!\ [Fich:3054][Doss:192] C:\DOCUME~1\ben\LOCALS~1\Temp
/!\ [Fich:2390][Doss:0] C:\DOCUME~1\ben\Cookies
/!\ [Fich:8137][Doss:28] C:\DOCUME~1\ben\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 19:31:48,15 ]----------------------

Bitdownload est un rogue. Dis au revoir à tes cra*cks et keygens.

---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)