Help!! j'ai un virus!!!
Résolu
amyann
-
pimprenelle27 Messages postés 22182 Statut Contributeur sécurité -
pimprenelle27 Messages postés 22182 Statut Contributeur sécurité -
Bonjour,
je pense avoir un virus!!!
merci de m'aider!!
avast ne le détecte pas et je n'arrive pas à le supprimer ac spybot!!!
je vien s de faire un rapport hijack :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:34:31, on 01/03/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16809)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\vVX1000.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\HomePlayer\HomePlayer.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ST291DH5\HiJackThis[1].exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: BHO Barre de Confiance - {988B07F5-7392-455A-8A1F-64935CB8B6ED} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Barre de confiance - {55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [DPService] "C:\Program Files\HP\DVDPlay\DPService.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HomePlayer] C:\Program Files\HomePlayer\HomePlayer.exe
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] ~"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.photoservice.com/telechargement/ImageUploader4.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\Windows\SYSTEM32\VundoFixSVC.exe
--
End of file - 11735 bytes
merci d'avance!!!!!!!
je pense avoir un virus!!!
merci de m'aider!!
avast ne le détecte pas et je n'arrive pas à le supprimer ac spybot!!!
je vien s de faire un rapport hijack :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:34:31, on 01/03/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16809)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\vVX1000.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\HomePlayer\HomePlayer.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ST291DH5\HiJackThis[1].exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: BHO Barre de Confiance - {988B07F5-7392-455A-8A1F-64935CB8B6ED} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Barre de confiance - {55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [DPService] "C:\Program Files\HP\DVDPlay\DPService.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HomePlayer] C:\Program Files\HomePlayer\HomePlayer.exe
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] ~"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.photoservice.com/telechargement/ImageUploader4.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\Windows\SYSTEM32\VundoFixSVC.exe
--
End of file - 11735 bytes
merci d'avance!!!!!!!
Configuration: Windows Vista Internet Explorer 7.0
24 réponses
- 1
- 2
Suivant
Résumé de la discussion
Doute sur un virus majeur et non détecté par Avast sur Windows Vista est illustré par un rapport HijackThis. Plusieurs solutions ont été discutées, notamment le retrait des éléments suspects et des outils comme CCleaner, SAS et Malwarebytes pour analyser et nettoyer le système. Des instructions détaillées ont été proposées pour les étapes de nettoyage, le démarrage en mode sans échec, la désactivation temporaire de TeaTimer et la collecte de rapports propres. En outre, certains conseils insistent sur la nécessité d’éditer les démarrages et d’obtenir des logs détaillés pour poster des preuves et suivre les manipulations.
-
Fait ceci et poste moi le rapport à la suite de la question êtes vous aider par quelqu'un. Merci.
Télécharge GenProc sur ton bureau (Attention le fichier est un fichier zip)
Dézippe le dossier, double-clique sur GenProc.bat
En final, poste le contenu du rapport qui s'affiche.
Comment utiliser GenProc
Pour ceux qui ont vista, ne pas oublier de désactiver Le contrôle des comptes utilisateurs
-
Merci bcp de m'aider!!
voici le rapport :
Rapport GenProc 2.398 [1] - 02/03/2009 à 19:31:04,55 - Windows Vista
Il est impératif de désactiver le résident TeaTimer de Spybot pendant l'ensemble des manipulations qui vont suivre. Aide Tea-Timer : http://ww11.genproc.com/spybot/spybot.html
Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures".
Par la suite, laisse-le avec ses réglages par défaut. C'est tout.
# Etape 1/ Télécharge :
- Lop S&D https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 (Eric 71 & Angeldark) sur ton Bureau.
- Toolbar-S&D https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 (Team IDN) sur ton Bureau.
Redémarre en mode sans échec comme indiqué ici https://www.wekyo.com/demarrer-le-pc-en-mode-sans-echec-windows-7-et-8/ ; pour retrouver le rapport, clique sur le raccourci "GenProc" sur ton bureau. Choisis ta session courante *** amélie ***
# Etape 2/
Lance Toolbar-S&D situé sur le Bureau.
Tape sur "2" puis valide en appuyant sur "Entrée". Ne ferme pas la fenêtre lors de la suppression.
# Etape 3/
Double-clique sur Lop S&D pour lancer l'installation, séléctionne la langue souhaitée, puis choisis l'Option 2 - Suppression - et patiente jusqu'à ce qu'il ait terminé.
# Etape 4/
Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.
# Etape 5/
Redémarre normalement et poste, dans la même réponse :
- Le contenu du rapport C:\TB.txt ;
- Le contenu du rapport C:\lopR.txt ;
- Un nouveau rapport HijackThis http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/hijackthis-version-install-sujet_199100_1.htm ;
Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.
----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------
~~ Arguments ~~
# Détections GenProc 2.398 02/03/2009 à 19:30:17,80
Lop:le 02/03/2009 à 19:30:21,27 "C:\Program Files\Circle Developement"
Toolbar:le 02/03/2009 à 19:30:26,52 "C:\Program Files\MSN Messenger\msimg32.dll"
-
-
Tu peux faire ce qui est indiqué et me poster les rapports.
-
VOICI LES 3 RAPPORTS :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Basique ( v6.0.6000 )
X86-based PC ( Multiprocessor Free : Intel(R) Celeron(R) D CPU 3.46GHz )
BIOS : BIOS Date: 03/09/07 18:46:32 Ver: 08.00.13
USER : amélie ( Not Administrator ! )
BOOT : Fail-safe boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090302-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:227 Go (Free:158 Go)
D:\ (Local Disk) - NTFS - Total:5 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 02/03/2009|22:09 )
[ UAC => 1 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\amélie@advertstream[1].txt
Supprime! - C:\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\amélie@adultfriendfinder[2].txt
Supprime! - C:\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\amélie@advertising[1].txt
Supprime! - C:\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\amélie@ero-advertising[1].txt
Supprime! - C:\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\amélie@adopt.euroclick[2].txt
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans Local
[23/08/2007|17:14] C:\Users\AMLIE~1\AppData\Local\Adobe
[29/09/2007|16:13] C:\Users\AMLIE~1\AppData\Local\Ahead
[21/08/2007|18:35] C:\Users\AMLIE~1\AppData\Local\Application Data
[23/10/2007|21:03] C:\Users\AMLIE~1\AppData\Local\Codemasters
[22/11/2007|00:16] C:\Users\AMLIE~1\AppData\Local\d3d8caps.dat
[13/12/2007|21:10] C:\Users\AMLIE~1\AppData\Local\d3d9caps.dat
[01/03/2009|22:42] C:\Users\AMLIE~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[16/02/2008|17:25] C:\Users\AMLIE~1\AppData\Local\DNA
[03/05/2008|09:16] C:\Users\AMLIE~1\AppData\Local\DVDPlay
[18/10/2008|15:40] C:\Users\AMLIE~1\AppData\Local\GDIPFONTCACHEV1.DAT
[18/01/2009|16:43] C:\Users\AMLIE~1\AppData\Local\Google
[21/08/2007|18:35] C:\Users\AMLIE~1\AppData\Local\Historique
[02/03/2009|22:00] C:\Users\AMLIE~1\AppData\Local\IconCache.db
[31/10/2007|13:59] C:\Users\AMLIE~1\AppData\Local\IM
[10/09/2007|14:34] C:\Users\AMLIE~1\AppData\Local\Lphant
[11/11/2007|20:38] C:\Users\AMLIE~1\AppData\Local\Magentic
[29/10/2008|22:47] C:\Users\AMLIE~1\AppData\Local\Microsoft
[24/08/2007|23:35] C:\Users\AMLIE~1\AppData\Local\Microsoft Games
[22/09/2007|13:29] C:\Users\AMLIE~1\AppData\Local\Mozilla
[24/11/2008|17:46] C:\Users\AMLIE~1\AppData\Local\PowerCinema
[02/03/2009|22:09] C:\Users\AMLIE~1\AppData\Local\Temp
[21/08/2007|18:35] C:\Users\AMLIE~1\AppData\Local\Temporary Internet Files
[23/08/2007|17:00] C:\Users\AMLIE~1\AppData\Local\VirtualStore
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[02/03/2009 11:38][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{B7D7C3D9-A772-409F-8943-DB61DE2FAEC5}.job
[02/03/2009 22:01][--ah-----] C:\Windows\tasks\SA.DAT
[02/03/2009 22:01][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[08/03/2007|06:14] C:\ProgramData\Adobe
[02/11/2006|13:59] C:\ProgramData\Application Data
[29/10/2007|11:34] C:\ProgramData\AVS4YOU
[21/08/2007|18:31] C:\ProgramData\Bureau
[21/07/2008|09:25] C:\ProgramData\CyberLink
[02/11/2006|13:59] C:\ProgramData\Desktop
[02/11/2006|13:59] C:\ProgramData\Documents
[11/09/2007|15:56] C:\ProgramData\eMule
[10/01/2008|22:20] C:\ProgramData\EPSON
[21/08/2007|18:31] C:\ProgramData\Favoris
[02/11/2006|13:59] C:\ProgramData\Favorites
[18/01/2009|16:24] C:\ProgramData\Google
[17/01/2008|18:32] C:\ProgramData\Grisoft
[08/03/2007|06:39] C:\ProgramData\Hewlett-Packard
[08/03/2007|06:20] C:\ProgramData\InstallShield
[15/02/2009|21:17] C:\ProgramData\Kaspersky Lab Setup Files
[17/01/2008|13:47] C:\ProgramData\Lavasoft
[25/09/2007|10:45] C:\ProgramData\LightScribe
[21/08/2007|18:31] C:\ProgramData\Menu D‚marrer
[22/12/2008|17:54] C:\ProgramData\Messenger Plus!
[17/10/2008|20:32] C:\ProgramData\Microsoft
[21/08/2007|18:31] C:\ProgramData\ModŠles
[22/09/2007|13:28] C:\ProgramData\Mozilla
[25/09/2007|10:32] C:\ProgramData\Nero
[13/12/2007|21:51] C:\ProgramData\NFS Underground
[17/05/2008|17:39] C:\ProgramData\RoboForm
[24/09/2007|21:21] C:\ProgramData\Roxio
[26/08/2007|17:49] C:\ProgramData\Sonic
[15/02/2009|23:11] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|13:59] C:\ProgramData\Start Menu
[28/10/2007|10:17] C:\ProgramData\Symantec
[02/11/2006|13:59] C:\ProgramData\Templates
[10/01/2008|22:27] C:\ProgramData\UDL
[30/10/2007|09:13] C:\ProgramData\vsosdk
--------------------\\ Listing des dossiers dans C:\Program Files
[08/03/2007|06:14] C:\Program Files\Adobe
[27/11/2007|14:26] C:\Program Files\Alwil Software
[16/01/2008|15:46] C:\Program Files\a-squared Anti-Malware
[23/12/2007|18:56] C:\Program Files\AVS4YOU
[14/12/2008|23:22] C:\Program Files\BarreConfCMCIC
[28/10/2007|11:15] C:\Program Files\BitDefender
[16/02/2008|17:25] C:\Program Files\BitTorrent
[22/08/2008|16:53] C:\Program Files\CCleaner
[26/12/2007|20:43] C:\Program Files\Codemasters
[30/12/2008|18:01] C:\Program Files\Common Files
[30/12/2008|17:52] C:\Program Files\Computer Artworks
[08/03/2007|06:04] C:\Program Files\CyberLink
[17/11/2008|21:58] C:\Program Files\Dactylo
[17/10/2007|20:35] C:\Program Files\DAEMON Tools
[26/12/2007|20:36] C:\Program Files\DivX
[30/08/2008|08:57] C:\Program Files\DNA
[11/09/2007|15:56] C:\Program Files\eMule
[10/01/2008|22:24] C:\Program Files\epson
[21/08/2007|18:31] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[14/01/2009|21:21] C:\Program Files\Freeplayer
[18/01/2009|16:37] C:\Program Files\Google
[08/03/2007|06:20] C:\Program Files\Hewlett-Packard
[15/01/2009|20:55] C:\Program Files\HomePlayer
[08/03/2007|06:15] C:\Program Files\HP
[16/01/2008|15:44] C:\Program Files\IncrediMail
[30/12/2008|17:52] C:\Program Files\InstallShield Installation Information
[13/02/2009|14:35] C:\Program Files\Internet Explorer
[01/08/2008|23:08] C:\Program Files\Java
[11/09/2007|16:23] C:\Program Files\K-Lite Codec Pack
[25/03/2008|17:19] C:\Program Files\LimeWire
[15/01/2008|15:02] C:\Program Files\Macrogaming
[23/12/2007|18:56] C:\Program Files\Magentic
[22/08/2008|16:47] C:\Program Files\Messenger Plus! Live
[02/11/2006|13:35] C:\Program Files\Microsoft Games
[17/10/2007|12:51] C:\Program Files\Microsoft LifeCam
[17/10/2008|20:33] C:\Program Files\Microsoft Office
[08/03/2007|06:16] C:\Program Files\Microsoft Works
[17/10/2008|20:32] C:\Program Files\Microsoft.NET
[08/03/2007|14:42] C:\Program Files\Movie Maker
[22/09/2007|13:29] C:\Program Files\Mozilla Firefox
[02/11/2006|13:35] C:\Program Files\MSBuild
[02/11/2006|13:35] C:\Program Files\MSN
[22/08/2008|16:47] C:\Program Files\MSN Messenger
[12/09/2007|02:02] C:\Program Files\MSXML 4.0
[25/09/2007|10:32] C:\Program Files\Nero
[30/12/2007|13:13] C:\Program Files\NovaLogic
[08/10/2008|20:46] C:\Program Files\OpenOffice.org 2.4
[14/01/2008|21:47] C:\Program Files\PC-Doctor 5 for Windows
[01/11/2007|20:22] C:\Program Files\QuickTime
[17/11/2008|22:07] C:\Program Files\RapidTyping
[08/03/2007|06:13] C:\Program Files\Real
[08/03/2007|06:01] C:\Program Files\Realtek
[02/11/2006|13:35] C:\Program Files\Reference Assemblies
[08/03/2007|06:12] C:\Program Files\Roxio
[08/03/2007|06:23] C:\Program Files\Services en ligne
[17/05/2008|17:38] C:\Program Files\Siber Systems
[15/02/2009|22:03] C:\Program Files\Spybot - Search & Destroy
[17/01/2008|14:52] C:\Program Files\Trend Micro
[02/11/2006|13:58] C:\Program Files\Uninstall Information
[09/01/2009|20:49] C:\Program Files\uTorrent
[05/09/2007|18:04] C:\Program Files\VideoLAN
[29/03/2008|22:52] C:\Program Files\VSO
[12/09/2007|02:18] C:\Program Files\Windows Calendar
[08/03/2007|14:42] C:\Program Files\Windows Collaboration
[12/09/2007|02:18] C:\Program Files\Windows Defender
[22/08/2008|16:47] C:\Program Files\Windows Live
[12/02/2009|23:11] C:\Program Files\Windows Mail
[10/10/2007|14:27] C:\Program Files\Windows Media Player
[21/08/2007|18:31] C:\Program Files\Windows NT
[08/03/2007|14:42] C:\Program Files\Windows Photo Gallery
[09/01/2008|14:59] C:\Program Files\Windows Sidebar
[25/09/2007|13:15] C:\Program Files\WinRAR
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[08/03/2007|06:14] C:\Program Files\Common Files\Adobe
[25/09/2007|10:38] C:\Program Files\Common Files\Ahead
[23/12/2007|18:56] C:\Program Files\Common Files\AVSMedia
[27/11/2007|14:12] C:\Program Files\Common Files\BitDefender
[17/10/2008|20:33] C:\Program Files\Common Files\DESIGNER
[15/01/2008|15:02] C:\Program Files\Common Files\DisqudurProtection
[08/03/2007|06:20] C:\Program Files\Common Files\InstallShield
[22/03/2008|20:11] C:\Program Files\Common Files\Java
[08/03/2007|06:05] C:\Program Files\Common Files\LightScribe
[08/03/2007|06:04] C:\Program Files\Common Files\LS Getting Started
[17/10/2008|20:35] C:\Program Files\Common Files\microsoft shared
[22/09/2007|13:28] C:\Program Files\Common Files\PX Storage Engine
[08/03/2007|06:13] C:\Program Files\Common Files\Real
[08/03/2007|06:03] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[08/03/2007|06:11] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[08/03/2007|06:03] C:\Program Files\Common Files\SureThing Shared
[30/12/2008|18:01] C:\Program Files\Common Files\SWF Studio
[28/10/2007|10:17] C:\Program Files\Common Files\Symantec Shared
[17/10/2008|20:32] C:\Program Files\Common Files\System
[08/03/2007|06:13] C:\Program Files\Common Files\xing shared
--------------------\\ Process
( 21 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-02 22:09:37
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 134
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:51][D:11]-> C:\Users\AMLIE~1\AppData\Local\Temp
[F:260][D:1]-> C:\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:6283][D:9]-> C:\Users\AMLIE~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:29][D:6]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 02/03/2009|22:11 - Option : [2]
--------------------\\ Fin du rapport a 22:11:18
[ UAC => 1 ]
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Basique ( v6.0.6000 )
X86-based PC ( Multiprocessor Free : Intel(R) Celeron(R) D CPU 3.46GHz )
BIOS : BIOS Date: 03/09/07 18:46:32 Ver: 08.00.13
USER : amélie ( Not Administrator ! )
BOOT : Fail-safe boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090302-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:227 Go (Free:158 Go)
D:\ (Local Disk) - NTFS - Total:5 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 02/03/2009|22:05 )
[ UAC => 0 ]
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.fr/?gws_rd=ssl"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="https://www.google.com/?gws_rd=ssl"
"Url"="https://www.msn.com/fr-fr/actualite/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="https://www.google.com/?gws_rd=ssl"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[ UAC => 1 ]
1 - "C:\ToolBar SD\TB_1.txt" - 02/03/2009|22:06 - Option : [2]
-----------\\ Fin du rapport a 22:06:36,89
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:33:42, on 02/03/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16809)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\vVX1000.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Windows\system32\conime.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: BHO Barre de Confiance - {988B07F5-7392-455A-8A1F-64935CB8B6ED} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Barre de confiance - {55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [DPService] "C:\Program Files\HP\DVDPlay\DPService.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HomePlayer] C:\Program Files\HomePlayer\HomePlayer.exe
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] ~"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.photoservice.com/telechargement/ImageUploader4.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\Windows\SYSTEM32\VundoFixSVC.exe
-
-
Bien maintenant fait ceci :
Telecharge malwarebytes
NB : S'il te manque COMCTL32.OCX alors télécharge le ici
Tu l´instale; le programme va se mettre automatiquement a jour.
Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".
Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".
Puis click sur "rechercher".
Laisse le scanner le pc...
Si des elements on ete trouvés > click sur supprimer la selection.
si il t´es demandé de redemarrer > click sur "yes".
A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.
Copie et colle le rapport stp.
PS : les rapport sont aussi rangé dans l onglet rapport/log
Tutoriaux
-
VOICI LE RAPPORT :
Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1815
Windows 6.0.6000
03/03/2009 22:45:05
mbam-log-2009-03-03 (22-45-05).txt
Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 192194
Temps écoulé: 1 hour(s), 0 minute(s), 5 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MS Juan (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\DomainService (Trojan.Agent) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\Users\amélie\Desktop\GenProc\outil\curl.exe (Trojan.Agent) -> Quarantined and deleted successfully.
-
-
pas mal ensuite vide la quarantaine de malware et fait ceci :
Pour commencer : faire un petit nettoyage de l'ordi et du registre avec Ccleaner, regarde bien le Tuto CCleaner
Télécharge Superantispyware (SAS)
Choisis "enregistrer" et enregistre-le sur ton bureau.
Double-clique sur l'icône d'installation qui vient de se créer et suis les instructions.
Créé une icône sur le bureau.
Double-clique sur l'icône de SAS (une tête dans un cercle rouge barré) pour le lancer.
- Si l'outil te demande de mettre à jour le programme ("update the program definitions", clique sur yes.
- Sous Configuration and Preferences, clique sur le bouton "Preferences"
- Clique sur l'onglet "Scanning Control "
- Dans "Scanner Options ", assure toi que la case devant lles lignes suivantes est cochée :
Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining
- Laisse les autres lignes décochées.
- Clique sur le bouton "Close" pour quitter l'écran du centre de contrôle.
- Dans la fenêtre principale, clique, dans "Scan for Harmful Software", sur "Scan your computer".
Dans la colonne de gauche, coche C:\Fixed Drive.
Dans la colonne de droite, sous "Complete scan", clique sur "Perform Complete Scan"
Clique sur "next" pour lancer le scan. Patiente pendant la durée du scan.
A la fin du scan, une fenêtre de résultats s'ouvre . Clique sur OK.
Assure toi que toutes les lignes de la fenêtre blanche sont cochées et clique sur "Next".
Tout ce qui a été trouvé sera mis en quarantaine. S'il t'es demandé de redémarrer l'ordi ("reboot"), clique sur Yes.
Pour recopier les informations sur le forum, fais ceci :
- après le redémarrage de l'ordi, double-clique sur l'icône pour lancer SAS.
- Clique sur "Preferences" puis sur l'onglet "Statistics/Logs ".
- Dans "scanners logs", double-clique sur SUPERAntiSpyware Scan Log.
- Le rapport va s'ouvrir dans ton éditeur de texte par défaut.
- Copie son contenu dans ta réponse.
Regarde bien le tuto SUPERAntiSpyware il est très bien expliqué.
-
- j'ai arrété le scan car il allait depuis plusieurs jours!!
SUPERAntiSpyware Scan Log
https://www.superantispyware.com/
Generated 03/09/2009 at 10:20 PM
Application Version : 4.25.1014
Core Rules Database Version : 3784
Trace Rules Database Version: 1741
Scan type : Complete Scan
Total Scan Time : 23:53:34
Memory items scanned : 725
Memory threats detected : 0
Registry items scanned : 8444
Registry threats detected : 1
File items scanned : 7395352
File threats detected : 365
Adware.Vundo Variant
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks#{7555906D-70F1-4FD6-8250-4FBE75252F58}
Adware.Tracking Cookie
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@doubleclick[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@smartadserver[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@ad.proxad[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adrevolver[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@ads.monster[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adserver.aol[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adtech[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adultfriendfinder[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@advertising[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@apmebf[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@bluestreak[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@bs.serving-sys[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@cetelem.solution.weborama[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@doubleclick[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@intermarche2009.solution.weborama[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@media.adrevolver[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@media.brandreachsys[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@mediaplex[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@rm.piximedia[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@serving-sys[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@smartadserver[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@tracking.publicidees[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@tradedoubler[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@weborama[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@xiti[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@yourmedia[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\amélie@doubleclick[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\amélie@smartadserver[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@ad.proxad[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adrevolver[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@ads.monster[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adserver.aol[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adtech[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adultfriendfinder[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@advertising[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@apmebf[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@bluestreak[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@bs.serving-sys[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@cetelem.solution.weborama[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@doubleclick[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@intermarche2009.solution.weborama[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@media.adrevolver[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@media.brandreachsys[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@mediaplex[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@rm.piximedia[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@serving-sys[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@smartadserver[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@tracking.publicidees[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@tradedoubler[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@weborama[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@xiti[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@yourmedia[1].txt
C:\Documents and Settings\amélie\Cookies\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\Cookies\amélie@doubleclick[1].txt
C:\Documents and Settings\amélie\Cookies\amélie@smartadserver[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@ad.proxad[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@adrevolver[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@ads.monster[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@adserver.aol[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@adtech[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@adultfriendfinder[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@advertising[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@apmebf[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@bluestreak[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@bs.serving-sys[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@cetelem.solution.weborama[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@doubleclick[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@intermarche2009.solution.weborama[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@media.adrevolver[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@media.brandreachsys[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@mediaplex[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@rm.piximedia[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@serving-sys[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@smartadserver[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@tracking.publicidees[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@tradedoubler[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@weborama[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@xiti[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@yourmedia[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@2101.stats.misstrends[2].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@ad.wedoo[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@ad.zanox[2].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@adserver.aol[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@adv.surinter[2].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@advertstream[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@cdiscount[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@clickintext[2].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@d2.advertserve[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@fr.classic.clickintext[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@m1.webstats.motigo[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@proximedia[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@richmedia.yahoo[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@roiservice[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@stat.hi-pi[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@track.effiliation[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@tracker.affistats[2].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@tracker.esecure-transaction[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@tracking.veille-referencement[2].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@weba.cdiscount[1].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[4].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[5].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[6].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.proximedia[2].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.sexyavenue[2].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.sexyvideos[2].txt
C:\Documents and Settings\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@xiti[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@2101.stats.misstrends[2].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@ad.wedoo[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@ad.zanox[2].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@adserver.aol[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@adv.surinter[2].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@advertstream[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@cdiscount[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@clickintext[2].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@d2.advertserve[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@fr.classic.clickintext[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@m1.webstats.motigo[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@proximedia[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@richmedia.yahoo[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@roiservice[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@stat.hi-pi[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@track.effiliation[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@tracker.affistats[2].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@tracker.esecure-transaction[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@tracking.veille-referencement[2].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@weba.cdiscount[1].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[4].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[5].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[6].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.proximedia[2].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.sexyavenue[2].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.sexyvideos[2].txt
C:\Documents and Settings\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@xiti[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@2101.stats.misstrends[2].txt
C:\Documents and Settings\yann\Cookies\Low\yann@ad.wedoo[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@ad.zanox[2].txt
C:\Documents and Settings\yann\Cookies\Low\yann@adserver.aol[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@adv.surinter[2].txt
C:\Documents and Settings\yann\Cookies\Low\yann@advertstream[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@cdiscount[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@clickintext[2].txt
C:\Documents and Settings\yann\Cookies\Low\yann@d2.advertserve[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@fr.classic.clickintext[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@m1.webstats.motigo[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@proximedia[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@richmedia.yahoo[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@roiservice[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@stat.hi-pi[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@track.effiliation[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@tracker.affistats[2].txt
C:\Documents and Settings\yann\Cookies\Low\yann@tracker.esecure-transaction[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@tracking.veille-referencement[2].txt
C:\Documents and Settings\yann\Cookies\Low\yann@weba.cdiscount[1].txt
C:\Documents and Settings\yann\Cookies\Low\yann@www.googleadservices[4].txt
C:\Documents and Settings\yann\Cookies\Low\yann@www.googleadservices[5].txt
C:\Documents and Settings\yann\Cookies\Low\yann@www.googleadservices[6].txt
C:\Documents and Settings\yann\Cookies\Low\yann@www.proximedia[2].txt
C:\Documents and Settings\yann\Cookies\Low\yann@www.sexyavenue[2].txt
C:\Documents and Settings\yann\Cookies\Low\yann@www.sexyvideos[2].txt
C:\Documents and Settings\yann\Cookies\Low\yann@xiti[1].txt
C:\Lop SD\Backup-Lop\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\amélie@adopt.euroclick[2].txt
C:\Lop SD\Backup-Lop\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\amélie@adultfriendfinder[2].txt
C:\Lop SD\Backup-Lop\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\amélie@advertising[1].txt
C:\Lop SD\Backup-Lop\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\amélie@advertstream[1].txt
C:\Lop SD\Backup-Lop\Users\AMLIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\amélie@ero-advertising[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@doubleclick[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@smartadserver[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@2o7[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@ad.caradisiac[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@ad.proxad[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@ad.zanox[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adopt.euroclick[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adrevolver[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@ads-dev.youporn[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@ads.monster[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adserver.aol[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adtech[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adultfriendfinder[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@advertising[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@apmebf[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@atdmt[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@bluestreak[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@boursoramabanque.solution.weborama[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@bs.serving-sys[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@cetelem.solution.weborama[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@doubleclick[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@ero-advertising[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@intermarche2009.solution.weborama[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@media.adrevolver[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@media.brandreachsys[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@mediaplex[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@rm.piximedia[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@serving-sys[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@smartadserver[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@tracking.publicidees[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@tradedoubler[2].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@weborama[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@www.googleadservices[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@xiti[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@youporn[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@yourmedia[1].txt
C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@zedo[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\amélie@atdmt[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\amélie@doubleclick[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\amélie@smartadserver[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@2o7[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@ad.caradisiac[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@ad.proxad[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@ad.zanox[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adopt.euroclick[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adrevolver[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@ads-dev.youporn[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@ads.monster[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adserver.aol[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adtech[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adultfriendfinder[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@advertising[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@apmebf[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@atdmt[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@bluestreak[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@boursoramabanque.solution.weborama[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@bs.serving-sys[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@cetelem.solution.weborama[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@doubleclick[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@ero-advertising[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@intermarche2009.solution.weborama[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@media.adrevolver[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@media.brandreachsys[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@mediaplex[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@rm.piximedia[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@serving-sys[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@smartadserver[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@tracking.publicidees[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@tradedoubler[2].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@weborama[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@www.googleadservices[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@xiti[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@youporn[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@yourmedia[1].txt
C:\Users\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@zedo[1].txt
C:\Users\amélie\Cookies\amélie@atdmt[2].txt
C:\Users\amélie\Cookies\amélie@doubleclick[1].txt
C:\Users\amélie\Cookies\amélie@smartadserver[2].txt
C:\Users\amélie\Cookies\Low\amélie@2o7[1].txt
C:\Users\amélie\Cookies\Low\amélie@ad.caradisiac[2].txt
C:\Users\amélie\Cookies\Low\amélie@ad.proxad[1].txt
C:\Users\amélie\Cookies\Low\amélie@ad.zanox[1].txt
C:\Users\amélie\Cookies\Low\amélie@adopt.euroclick[2].txt
C:\Users\amélie\Cookies\Low\amélie@adrevolver[2].txt
C:\Users\amélie\Cookies\Low\amélie@ads-dev.youporn[1].txt
C:\Users\amélie\Cookies\Low\amélie@ads.monster[1].txt
C:\Users\amélie\Cookies\Low\amélie@adserver.aol[1].txt
C:\Users\amélie\Cookies\Low\amélie@adtech[1].txt
C:\Users\amélie\Cookies\Low\amélie@adultfriendfinder[2].txt
C:\Users\amélie\Cookies\Low\amélie@advertising[1].txt
C:\Users\amélie\Cookies\Low\amélie@apmebf[1].txt
C:\Users\amélie\Cookies\Low\amélie@atdmt[2].txt
C:\Users\amélie\Cookies\Low\amélie@bluestreak[2].txt
C:\Users\amélie\Cookies\Low\amélie@boursoramabanque.solution.weborama[2].txt
C:\Users\amélie\Cookies\Low\amélie@bs.serving-sys[1].txt
C:\Users\amélie\Cookies\Low\amélie@cetelem.solution.weborama[2].txt
C:\Users\amélie\Cookies\Low\amélie@doubleclick[1].txt
C:\Users\amélie\Cookies\Low\amélie@ero-advertising[1].txt
C:\Users\amélie\Cookies\Low\amélie@intermarche2009.solution.weborama[2].txt
C:\Users\amélie\Cookies\Low\amélie@media.adrevolver[1].txt
C:\Users\amélie\Cookies\Low\amélie@media.brandreachsys[2].txt
C:\Users\amélie\Cookies\Low\amélie@mediaplex[1].txt
C:\Users\amélie\Cookies\Low\amélie@rm.piximedia[1].txt
C:\Users\amélie\Cookies\Low\amélie@serving-sys[2].txt
C:\Users\amélie\Cookies\Low\amélie@smartadserver[1].txt
C:\Users\amélie\Cookies\Low\amélie@tracking.publicidees[2].txt
C:\Users\amélie\Cookies\Low\amélie@tradedoubler[2].txt
C:\Users\amélie\Cookies\Low\amélie@weborama[1].txt
C:\Users\amélie\Cookies\Low\amélie@www.googleadservices[1].txt
C:\Users\amélie\Cookies\Low\amélie@xiti[1].txt
C:\Users\amélie\Cookies\Low\amélie@youporn[1].txt
C:\Users\amélie\Cookies\Low\amélie@yourmedia[1].txt
C:\Users\amélie\Cookies\Low\amélie@zedo[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@2101.stats.misstrends[2].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@ad.wedoo[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@ad.zanox[2].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@adserver.aol[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@adv.surinter[2].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@advertstream[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@cdiscount[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@clickintext[2].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@d2.advertserve[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@fr.classic.clickintext[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@m1.webstats.motigo[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@proximedia[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@richmedia.yahoo[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@roiservice[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@stat.hi-pi[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@track.effiliation[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@tracker.affistats[2].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@tracker.esecure-transaction[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@tracking.veille-referencement[2].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@weba.cdiscount[1].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[4].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[5].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[6].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.proximedia[2].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.sexyavenue[2].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@www.sexyvideos[2].txt
C:\Users\yann\AppData\Roaming\Microsoft\Windows\Cookies\Low\yann@xiti[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@2101.stats.misstrends[2].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@ad.wedoo[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@ad.zanox[2].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@adserver.aol[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@adv.surinter[2].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@advertstream[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@cdiscount[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@clickintext[2].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@d2.advertserve[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@fr.classic.clickintext[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@m1.webstats.motigo[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@proximedia[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@richmedia.yahoo[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@roiservice[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@stat.hi-pi[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@track.effiliation[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@tracker.affistats[2].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@tracker.esecure-transaction[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@tracking.veille-referencement[2].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@weba.cdiscount[1].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[4].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[5].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.googleadservices[6].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.proximedia[2].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.sexyavenue[2].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@www.sexyvideos[2].txt
C:\Users\yann\Application Data\Microsoft\Windows\Cookies\Low\yann@xiti[1].txt
C:\Users\yann\Cookies\Low\yann@2101.stats.misstrends[2].txt
C:\Users\yann\Cookies\Low\yann@ad.wedoo[1].txt
C:\Users\yann\Cookies\Low\yann@ad.zanox[2].txt
C:\Users\yann\Cookies\Low\yann@adserver.aol[1].txt
C:\Users\yann\Cookies\Low\yann@adv.surinter[2].txt
C:\Users\yann\Cookies\Low\yann@advertstream[1].txt
C:\Users\yann\Cookies\Low\yann@cdiscount[1].txt
C:\Users\yann\Cookies\Low\yann@clickintext[2].txt
C:\Users\yann\Cookies\Low\yann@d2.advertserve[1].txt
C:\Users\yann\Cookies\Low\yann@fr.classic.clickintext[1].txt
C:\Users\yann\Cookies\Low\yann@m1.webstats.motigo[1].txt
C:\Users\yann\Cookies\Low\yann@proximedia[1].txt
C:\Users\yann\Cookies\Low\yann@richmedia.yahoo[1].txt
C:\Users\yann\Cookies\Low\yann@roiservice[1].txt
C:\Users\yann\Cookies\Low\yann@stat.hi-pi[1].txt
C:\Users\yann\Cookies\Low\yann@track.effiliation[1].txt
C:\Users\yann\Cookies\Low\yann@tracker.affistats[2].txt
C:\Users\yann\Cookies\Low\yann@tracker.esecure-transaction[1].txt
C:\Users\yann\Cookies\Low\yann@tracking.veille-referencement[2].txt
C:\Users\yann\Cookies\Low\yann@weba.cdiscount[1].txt
C:\Users\yann\Cookies\Low\yann@www.googleadservices[4].txt
C:\Users\yann\Cookies\Low\yann@www.googleadservices[5].txt
C:\Users\yann\Cookies\Low\yann@www.googleadservices[6].txt
C:\Users\yann\Cookies\Low\yann@www.proximedia[2].txt
C:\Users\yann\Cookies\Low\yann@www.sexyavenue[2].txt
C:\Users\yann\Cookies\Low\yann@www.sexyvideos[2].txt
C:\Users\yann\Cookies\Low\yann@xiti[1].txt
SUPERAntiSpyware Scan Log
https://www.superantispyware.com/
Generated 03/05/2009 at 10:25 PM
Application Version : 4.25.1014
Core Rules Database Version : 3784
Trace Rules Database Version: 1741
Scan type : Complete Scan
Total Scan Time : 02:39:24
Memory items scanned : 715
Memory threats detected : 0
Registry items scanned : 8444
Registry threats detected : 1
File items scanned : 2021264
File threats detected : 63
Adware.Vundo Variant
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks#{7555906D-70F1-4FD6-8250-4FBE75252F58}
Adware.Tracking Cookie
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@ad.proxad[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adserver.aol[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adtech[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adultfriendfinder[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@advertising[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@apmebf[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@bluestreak[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@bs.serving-sys[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@cetelem.solution.weborama[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@doubleclick[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@media.adrevolver[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@media.brandreachsys[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@mediaplex[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@rm.piximedia[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@serving-sys[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@smartadserver[2].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@tradedoubler[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@weborama[1].txt
C:\Documents and Settings\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@xiti[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@ad.proxad[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adserver.aol[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adtech[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@adultfriendfinder[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@advertising[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@apmebf[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@bluestreak[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@bs.serving-sys[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@cetelem.solution.weborama[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@doubleclick[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@media.adrevolver[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@media.brandreachsys[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@mediaplex[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@rm.piximedia[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@serving-sys[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@smartadserver[2].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@tradedoubler[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@weborama[1].txt
C:\Documents and Settings\amélie\Application Data\Microsoft\Windows\Cookies\Low\amélie@xiti[1].txt
C:\Documents and Settings\amélie\Cookies\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@ad.proxad[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@adserver.aol[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@adtech[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@adultfriendfinder[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@advertising[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@apmebf[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@atdmt[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@bluestreak[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@bs.serving-sys[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@cetelem.solution.weborama[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@doubleclick[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@media.adrevolver[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@media.brandreachsys[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@mediaplex[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@rm.piximedia[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@serving-sys[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@smartadserver[2].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@tradedoubler[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@weborama[1].txt
C:\Documents and Settings\amélie\Cookies\Low\amélie@xiti[1].txt
-
-
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
Supprimer déjà en regardant bien le tuto ce qu'à trouvé SAS, ensuite fait moi unn dernier hijackthis, puis ceci :
https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan -
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:33:42, on 02/03/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16809)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\vVX1000.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Windows\system32\conime.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: BHO Barre de Confiance - {988B07F5-7392-455A-8A1F-64935CB8B6ED} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Barre de confiance - {55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [DPService] "C:\Program Files\HP\DVDPlay\DPService.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HomePlayer] C:\Program Files\HomePlayer\HomePlayer.exe
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] ~"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.photoservice.com/telechargement/ImageUploader4.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\Windows\SYSTEM32\VundoFixSVC.exe
-
-
si j'attends maintenant le scan panda.
-
-
Résultats : 17 virus ou logiciels espions détectés.
Eléments suspects: Aucun fichier suspect détecté.
Vulnérabilités : Aucune vulnérabilité détectée. -
tu peux me poster le rapport STP. Merci.
-
je dois recommencer le scan car j'ai dû m'absenter et je n'ai pas le rapport!!
il ne comporte qu'une ligne :
<div class="decalage1"><img src="GenProcPage/1.gif" />Poste un rapport <a href="https://www.micro-astuce.com/securite/NanoScan-Panda.php" target="_blank"><em>NanoScan</em></a><br /><br /></div> -
il faut que je sache le nom des virus pour finir la désinfection.
-
-
;***********************************************************************************************************************************************************************************
ANALYSIS: 2009-03-11 07:05:22
PROTECTIONS: 5
MALWARE: 17
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
avast! antivirus 4.8.1335 [VPS 090309-0] 4.8.1335 Yes Yes
Spybot - Search and Destroy 1.0.0.6 No No
Windows Defender 1.1.1505.0 No Yes
SUPERAntiSpyware 4, 25, 0, 1014 No Yes
avast! antivirus 4.8.1335 [VPS 090309-0] 4.8.1335 No Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@doubleclick[2].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@doubleclick[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@atdmt[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@atdmt[2].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@tradedoubler[1].txt
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@247realmedia[1].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@mediaplex[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@xiti[1].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@apmebf[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@serving-sys[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@bs.serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@bs.serving-sys[2].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@weborama[3].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@weborama[2].txt
00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adtech[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@advertising[1].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@bluestreak[1].txt
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adrevolver[2].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adultfriendfinder[2].txt
00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adviva[2].txt
00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adviva[3].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@smartadserver[2].txt
;===================================================================================================================================================================================
SUSPECTS
Sent Location ��&W���39
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description ��&W���39
;===================================================================================================================================================================================
;=================================================================================================================================================================================== -
plus de virus que des cookies à supprimer avec ccleaner.
Maintenant un dernier hiajckthis.-
ogfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:33:42, on 02/03/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16809)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\vVX1000.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Windows\system32\conime.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: BHO Barre de Confiance - {988B07F5-7392-455A-8A1F-64935CB8B6ED} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Barre de confiance - {55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [DPService] "C:\Program Files\HP\DVDPlay\DPService.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HomePlayer] C:\Program Files\HomePlayer\HomePlayer.exe
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] ~"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.photoservice.com/telechargement/ImageUploader4.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\Windows\SYSTEM32\VundoFixSVC.exe
-
-
Tu relance hijackthis, mais là tu clique juste sur faire un scan, ensuite tu sélectionne les lignes puis,
O4 - HKLM\..\Run: [DPService] "C:\Program Files\HP\DVDPlay\DPService.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.photoservice.com/telechargement/ImageUploader4.cab
Tu cliques en bas sur le bouton FIX CHECKED et valides .
2- Redémarres l'ordi .
( important pour que certaines modifs faites avec hijakthis soient prises en compte )
Ensuite ceci :
Télécharge Toolscleaner sur ton Bureau :
* Double-clique sur ToolsCleaner2.exe et laisse le travailler
* Clique sur Recherche et laisse le scan se terminer.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options facultatives.
* Clique sur Quitter, pour que le rapport puisse se créer.
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse
Et enfin comme ton pc n'est pas à jour, il va faloir télécharger le service pack trois de windows et faire ceci pour mettre à jour ton pc :
pour voir si ton pc est à jour :
http://www.filehippo.com/updatechecker/UpdateChecker.exe (attention certain logiciels mis en lien pour les mises à jour peuvent être en anglais, rechercher à ce moment là celui en français)
-
j'ai fait un copier/coller car pas possible d'enregister le rapport : acces refusé!!
C:\Users\amélie\Desktop\LopSD.exe: supprimé !
C:\Users\amélie\Desktop\HJTInstall.exe: supprimé !
C:\Users\amélie\Desktop\ToolBarSD.exe: supprimé !
C:\Users\amélie\Downloads\GenProc.zip: supprimé !
C:\VundoFix.txt: ERREUR DE SUPPRESSION !!
C:\lopR.txt: ERREUR DE SUPPRESSION !!
C:\TB.txt: ERREUR DE SUPPRESSION !!
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Users\amélie\Desktop\GenProc\Page\GenProc[*].html: ERREUR DE SUPPRESSION !!
C:\Lop SD: supprimé !
C:\Vundofix backups: supprimé !
C:\Toolbar SD: supprimé !
C:\Program Files\Trend Micro\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: ERREUR DE SUPPRESSION !!
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: ERREUR DE SUPPRESSION !!
C:\Users\amélie\AppData\Local\VirtualStore\Program Files\Trend Micro\HijackThis: supprimé !
C:\Users\amélie\Desktop\GenProc: supprimé !
-
-
Il va y avoir ça à supprimer manuellement :
C:\VundoFix.txt: ERREUR DE SUPPRESSION !!
C:\lopR.txt: ERREUR DE SUPPRESSION !!
C:\TB.txt: ERREUR DE SUPPRESSION !!
C:\Users\amélie\Desktop\GenProc\Page\GenProc[*].html: ERREUR DE SUPPRESSION !!
C:\Program Files\Trend Micro\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: ERREUR DE SUPPRESSION !!
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: ERREUR DE SUPPRESSION !!
-
Tu as fait le dernier pour la mise à jour de ton pc?
-
il y a tt ça!!!
13 Updates Detected
CCleaner 2.17.853
Installed Version: 2.10.0.618 3.04MB
DAEMON Tools Lite 4.30.3
Installed Version: 4.10.0.0 6.98MB
eMule 0.49c
Installed Version: 0.48.0.8 3.19MB
Firefox 3.0.7
Installed Version: 2.0.0.2 7.17MB
Flash Player 10.0.22.87 (IE)
Installed Version: 9.0.124.0 1.83MB
Java Runtime Environment 1.6.0.12
Installed Version: 1.6.0.7 15.52MB
LimeWire Basic 5.1.2
Installed Version: 4.16.6.0 15.74MB
OpenOffice.org 3.0.1 Final
Installed Version: 2.4.1 128.05MB
QuickTime Player 7.60.92.0
Installed Version: 7.2.0.240 20.86MB
RealPlayer 11.0.0.581
Installed Version: 6.0.12.1741 12.72MB
uTorrent 1.8.2 Build 14458
Installed Version: 1.8.1.12639 264KB
Windows Live Messenger 2009 (14.0.8064)
Installed Version: 8.1.178.0 1.09MB
WinRAR 3.80
Installed Version: 3.50.0.0 1.18MB
Total size: 217.63MB
2 Beta Updates Detected
Firefox 3.1 Beta 3
Installed Version: 2.0.0.2 7.55MB
uTorrent 1.8.3 Beta 14755
Installed Version: 1.8.1.12639 275KB
Total size: 7.82MB
Computer scan time: 5.436 secs
FileHippo processing time: 0.003 secs
Update Checker version: 1.030
Clear results - Report a Problem
- 1
- 2
Suivant
