Problème Yahoo Toolbar et/ou Mozilla Firefox Résolu

Question

Bonjour,Au démarrage de Mozilla Firefox (version 1.5.0.2) j'ai parfois (mais assez fréquemment) un message me demandant notamment si je souhaite utiliser fr. yahoo.search comme moteur de recherche par défaut. (comme ceci : https://imageshack.com/ )A chaque fois je réponds non et je coche la case "ne plus me poser la question" (mais idem quand je la décoche) et je fais OK. Ensuite le navigateur s'ouvre sur la fenêtre https://www.mozilla.org/en-US/firefox/new/?utm_campaign=firefox-update-redirect&utm_medium=firefox-browser&utm_source=firefox-browser Habituellement je configure Firefox pour que la page d'accueil soit https://www.google.fr/?gws_rd=ssl mais quand j'ai ce problème et que je clique sur Accueil de la barre de tâches c'est la page https://www.google.fr/?client=firefox-a&rls=org.mozilla:fr:official&gws_rd=ssl qui s'ouvre.Là je remarque qu'un menu Yahoo est présent. J'ai pourtant désinstallé Yahoo Toolbar et Mozilla Firefox à plusieurs reprises mais ce problème persiste. J'ai supprimé les cookies Yahoo. J'ai aussi utilisé Ad-aware mais le problème persiste.Parfois un autre problème vient se greffer à la suite : certains de mes marques-pages ont disparu !, en bas de la liste.A noter que c'était le même problème avec l'ancienne version de Mozilla.Voici le contenu de l'analyse de HighjackThis :Logfile of HijackThis v1.99.1Scan saved at 19:34:41, on 16/05/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\AGRSMMSG.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\QuickTime\qttask.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\Program Files\Java\j2re1.4.2_06\bin\jusched.exeC:\WINDOWS\System32\GSICON.EXEC:\WINDOWS\System32\DSLAGENT.EXEC:\Program Files\Picasa2\PicasaMediaDetector.exeC:\Program Files\Winamp\winampa.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Documents and Settings\GUILLAUME\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=sslR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.connect-we.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dllO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dllO2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dllO2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dllO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dllO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osbootO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [Parallel Tasking] C:\Program Files\Parallel Tasking\ptask.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exeO4 - HKLM\..\Run: [GSICONEXE] GSICON.EXEO4 - HKLM\..\Run: [DSLAGENTEXE] DSLAGENT.EXEO4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exeO4 - HKLM\..\Run: [Uninstall0001] "C:\Program Files\Fichiers communs\Totem Shared\Uninstall0001\upd.exe" LASTCALL!adverts.stripsaver.com!StatsStripSaverO4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exeO4 - Startup: WkCalRem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Tout télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddList.htmlO8 - Extra context menu item: Tout télécharger en utilisant FlashGet - C:\Program Files\FlashGet\jc_all.htmO8 - Extra context menu item: Télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddLink.htmlO8 - Extra context menu item: Télécharger en utilisant FlashGet - C:\Program Files\FlashGet\jc_link.htmO9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dllO9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dllO9 - Extra button: Translate - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnkO9 - Extra 'Tools' menuitem: LingoWare Translator... - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnkO9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exeO9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO14 - IERESET.INF: START_PAGE_URL=http://www.connect-we.fr/O16 - DPF: Interface Chat Voila - http://chat10.x-echo.com/version4/Applet/vchatsign.cabO16 - DPF: {0000ED9A-DFFC-11D4-8D7A-B396C6A4A836} (ToolBar NetCourrier) - http://img.medianet-technologies.com/netc/toolbar/mttoolbar.cabO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cabO16 - DPF: {5EC7C511-CD0F-42E6-830C-1BD9882F3458} - http://www.pps.tv/O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_s...O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{1E2F5B39-473B-43CB-A905-CC1201540CF0}: NameServer = 84.103.237.143 86.64.145.143O17 - HKLM\System\CS1\Services\Tcpip\..\{1E2F5B39-473B-43CB-A905-CC1201540CF0}: NameServer = 84.103.237.143 86.64.145.143O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)Si vous avez des idées à me suggérer je suis preneur. Merci.

JPR44 · Answer

J'ai oublié de préciser que j'ai également utilisé Spybot.A votre avis c'est dû à quoi tout ça ? Un spyware ou autre chose ?

JPR44 · Answer

Puis-je supprimer tous les fichiers infectés trouvés par ewido sans risque ? Merci.__________________________________________________ewido anti-malware online scanner	https://www.avg.com/en-us/free-antivirus-download__________________________________________________Name: TrackingCookie.2o7Path: C:\Documents and Settings\GUILLAUME\Cookies\guillaume@redcats.122.2o7[1].txtRisk: MediumName: Downloader.IstBar.nhPath: C:\dataRisk: HighName: TrackingCookie.BluestreakPath: :mozilla.13:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.DoubleclickPath: :mozilla.20:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SmartadserverPath: :mozilla.23:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SmartadserverPath: :mozilla.24:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SmartadserverPath: :mozilla.25:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SmartadserverPath: :mozilla.26:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.OverturePath: :mozilla.27:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.OverturePath: :mozilla.28:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.TradedoublerPath: :mozilla.36:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.TradedoublerPath: :mozilla.41:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.TradedoublerPath: :mozilla.42:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.TradedoublerPath: :mozilla.43:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.TradedoublerPath: :mozilla.44:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.TradedoublerPath: :mozilla.45:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.AtdmtPath: :mozilla.116:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.AdvertisingPath: :mozilla.124:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.AdvertisingPath: :mozilla.125:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.AdvertisingPath: :mozilla.126:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.WeboramaPath: :mozilla.128:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.WeboramaPath: :mozilla.129:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.WeboramaPath: :mozilla.130:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.Serving-sysPath: :mozilla.135:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.Serving-sysPath: :mozilla.136:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.Serving-sysPath: :mozilla.137:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.Serving-sysPath: :mozilla.138:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.Serving-sysPath: :mozilla.139:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.247realmediaPath: :mozilla.162:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.247realmediaPath: :mozilla.163:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.247realmediaPath: :mozilla.164:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.247realmediaPath: :mozilla.165:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.247realmediaPath: :mozilla.166:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.247realmediaPath: :mozilla.167:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.247realmediaPath: :mozilla.168:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.247realmediaPath: :mozilla.169:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.247realmediaPath: :mozilla.170:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.ComclickPath: :mozilla.184:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.ComclickPath: :mozilla.185:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.ComclickPath: :mozilla.186:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.ComclickPath: :mozilla.187:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FalkagPath: :mozilla.211:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FalkagPath: :mozilla.212:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FalkagPath: :mozilla.213:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FalkagPath: :mozilla.214:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FalkagPath: :mozilla.215:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FalkagPath: :mozilla.216:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.EstatPath: :mozilla.217:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.MediaplexPath: :mozilla.224:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.EuroclickPath: :mozilla.248:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.AdbritePath: :mozilla.249:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.EuroclickPath: :mozilla.250:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.EuroclickPath: :mozilla.251:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.EuroclickPath: :mozilla.252:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.EuroclickPath: :mozilla.253:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.CasalemediaPath: :mozilla.254:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.CasalemediaPath: :mozilla.255:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FastclickPath: :mozilla.256:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FastclickPath: :mozilla.257:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FastclickPath: :mozilla.258:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FalkagPath: :mozilla.277:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FalkagPath: :mozilla.278:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FalkagPath: :mozilla.279:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FalkagPath: :mozilla.280:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.309:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.310:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.311:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.312:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.313:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.314:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.315:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.316:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.317:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.318:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.319:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.320:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.321:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.322:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.323:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.324:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.YadroPath: :mozilla.326:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.YadroPath: :mozilla.327:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.WebtrendslivePath: :mozilla.333:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.AdtechPath: :mozilla.360:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.AdtechPath: :mozilla.361:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.WeboramaPath: :mozilla.395:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.ZedoPath: :mozilla.450:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.ZedoPath: :mozilla.451:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.ZedoPath: :mozilla.452:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.ValueclickPath: :mozilla.464:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.ValueclickPath: :mozilla.465:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.OverturePath: :mozilla.570:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.FindwhatPath: :mozilla.571:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.YieldmanagerPath: :mozilla.587:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.YieldmanagerPath: :mozilla.588:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.YieldmanagerPath: :mozilla.589:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.2o7Path: :mozilla.591:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.CasinotropezPath: :mozilla.600:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.618:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.619:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.620:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.621:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.622:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.623:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.624:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.625:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.626:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.627:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.628:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.629:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.630:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.631:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.632:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.633:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.634:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.635:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.636:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.637:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.638:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.639:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.640:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.641:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.642:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.643:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.644:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.645:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.646:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.647:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.648:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.649:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.650:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.651:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.StatcounterPath: :mozilla.652:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.QuestionmarketPath: :mozilla.665:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.QuestionmarketPath: :mozilla.666:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SitestatPath: :mozilla.727:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.AdbritePath: :mozilla.747:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.BluestreakPath: :mozilla.794:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.BfastPath: :mozilla.829:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SexcounterPath: :mozilla.874:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SexcounterPath: :mozilla.875:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SexcounterPath: :mozilla.876:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SexcounterPath: :mozilla.877:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SexcounterPath: :mozilla.878:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SexcounterPath: :mozilla.879:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SexcounterPath: :mozilla.880:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SexcounterPath: :mozilla.881:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SexcounterPath: :mozilla.882:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SexcounterPath: :mozilla.883:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SitestatPath: :mozilla.891:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.HitboxPath: :mozilla.903:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.HitboxPath: :mozilla.904:C:\Documents and Settings\GUILLAUME\Application Data\Mozilla\Firefox\Profiles\yxpkp688.default\cookies.txtRisk: MediumName: TrackingCookie.SmartadserverPath: :mozilla.13:C:\Documents and Settings\GUILLAUME\Application Data\Phoenix\Profiles\default\br1f79bd.slt\cookies.txtRisk: MediumName: TrackingCookie.GoldenpalacePath: C:\Documents and Settings\GUILLAUME\Local Settings\Temp\Cookies\guillaume@goldenpalace[2].txtRisk: MediumName: Adware.GatorPath: C:\Program Files\Fichiers communs	ppnrabdrbrltrf\ldpjctnl.exeRisk: MediumName: Adware.GatorPath: C:\Program Files\Fichiers communs	ppnrabd	jernlfbjr\dbphchtpc.exeRisk: MediumName: Adware.CydoorPath: C:\Program Files\FlashGet\BACKUP\cd_install277.exe/cd_clint.dllRisk: Medium

aranjuez31 · Answer

revu la longueur....cela prouve que toilette pas souvent faite !!======enchaîne avec6/ - Scan online avec BitDefender  (fonctionne uniquement sous Internet Explorer en acceptant l’ activX) https://assiste.com/404_La_page_demandee_n_existe_pas.phphttp://www.bitdefender.fr/scan8/ie.html Copie/COLLE le rapport entier====je commenterai ton logfile ds la journée et te dirai quelles actions menées========un p-feu tt d abord(A)- Si tu n’ as pas de pare-feu, autre que le ‘joujou’  de Windows (à désactiver), je te        conseille Kerio (gratuit même après les 30 jours d’ essai)Tutorial et téléchargement ici :https://www.vulgarisation-informatique.com/kerio.php(B)- Règle d’ or à respecter : 1 seul pare-feu, 1 seul antivirus

JPR44 · Answer

Merci pour ton aide aranjuez31.T'as raison le ménage n'est pas souvent fait. Je me contente d'utiliser un anti-virus et utilise Spybot de temps en temps.Voici, en attendant la suite, le rapport de Bidefender :BitDefender Online Scanner Rapport d'analyse généré à: Wed, May 17, 2006 - 05:24:41Voie d'analyse: C:\;D:\;E:\;F:\;G:\;H:\;I:C:\$VAULT$.AVG\01064312.FILInfecté par: Win32.Sober.I@mmC:\$VAULT$.AVG\01064312.FILEchec de la désinfectionC:\$VAULT$.AVG\01064312.FILSuppriméC:\Program Files\Fichiers communs	ppnrabdrbrltrf\ldpjctnl.exeInfecté par: Trojan.Agent.AYC:\Program Files\Fichiers communs	ppnrabdrbrltrf\ldpjctnl.exeEchec de la désinfectionC:\Program Files\Fichiers communs	ppnrabdrbrltrf\ldpjctnl.exeSuppriméC:\Program Files\Fichiers communs	ppnrabd	jernlfbjr\dbphchtpc.exeInfecté par: Trojan.Agent.AYC:\Program Files\Fichiers communs	ppnrabd	jernlfbjr\dbphchtpc.exeEchec de la désinfectionC:\Program Files\Fichiers communs	ppnrabd	jernlfbjr\dbphchtpc.exeSuppriméC:\System Volume Information\_restore{3A3AB122-50F2-4A3D-8ECF-27BB1B3E912E}\RP603\A0661164.exeInfecté par: Trojan.Agent.AYC:\System Volume Information\_restore{3A3AB122-50F2-4A3D-8ECF-27BB1B3E912E}\RP603\A0661164.exeEchec de la désinfectionC:\System Volume Information\_restore{3A3AB122-50F2-4A3D-8ECF-27BB1B3E912E}\RP603\A0661164.exeSuppriméC:\System Volume Information\_restore{3A3AB122-50F2-4A3D-8ECF-27BB1B3E912E}\RP603\A0661165.exeInfecté par: Trojan.Agent.AYC:\System Volume Information\_restore{3A3AB122-50F2-4A3D-8ECF-27BB1B3E912E}\RP603\A0661165.exeEchec de la désinfectionC:\System Volume Information\_restore{3A3AB122-50F2-4A3D-8ECF-27BB1B3E912E}\RP603\A0661165.exeSuppriméC:\WINDOWS\system32\cmd.ftpInfecté par: Backdoor.BotGet.FtpB.GenC:\WINDOWS\system32\cmd.ftp	Supprimé

JPR44 · Answer

Bonsoir,J'ai supprimé les 153 fichiers infectés détectés par Ewido comme me l'a conseillé aranjuez31.Ensuite j'ai suivi la procédure décrite par boulepate62 avec CCleaner.Je ne suis pas très chaud pour installer le SP2 car j'avais déjà essayé et ça m'avait causé quelques problèmes si bien que je l'avais désinstallé presque aussitôt. A moins que vous me disiez que j'ai vraiment intérêt à le faire et que désormais ça devrait moins poser de problèmes.Par contre, comme je n'ai pas de pare-feu, je crois que je vais utiliser Kerio.Merci encore pour votre aide.Voici le nouveau rapport HighjackThis :Logfile of HijackThis v1.99.1Scan saved at 22:14:12, on 17/05/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\AGRSMMSG.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\QuickTime\qttask.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\Program Files\Java\j2re1.4.2_06\bin\jusched.exeC:\WINDOWS\System32\GSICON.EXEC:\WINDOWS\System32\DSLAGENT.EXEC:\Program Files\Picasa2\PicasaMediaDetector.exeC:\Program Files\Winamp\winampa.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Documents and Settings\GUILLAUME\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=sslR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.connect-we.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dllO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dllO2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dllO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osbootO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exeO4 - HKLM\..\Run: [GSICONEXE] GSICON.EXEO4 - HKLM\..\Run: [DSLAGENTEXE] DSLAGENT.EXEO4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exeO4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exeO4 - Startup: WkCalRem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Tout télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddList.htmlO8 - Extra context menu item: Télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddLink.htmlO9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dllO9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Translate - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnkO9 - Extra 'Tools' menuitem: LingoWare Translator... - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnkO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO14 - IERESET.INF: START_PAGE_URL=http://www.connect-we.fr/O16 - DPF: Interface Chat Voila - http://chat10.x-echo.com/version4/Applet/vchatsign.cabO16 - DPF: {0000ED9A-DFFC-11D4-8D7A-B396C6A4A836} (ToolBar NetCourrier) - http://img.medianet-technologies.com/netc/toolbar/mttoolbar.cabO16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cabO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cabO16 - DPF: {5EC7C511-CD0F-42E6-830C-1BD9882F3458} - http://www.pps.tv/O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_s...O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{1E2F5B39-473B-43CB-A905-CC1201540CF0}: NameServer = 86.64.145.146 84.103.237.146O17 - HKLM\System\CS1\Services\Tcpip\..\{1E2F5B39-473B-43CB-A905-CC1201540CF0}: NameServer = 86.64.145.146 84.103.237.146O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)

JPR44 · Answer

Ça y est, j'ai installé Kerio.Maintenant ce serait sympa qu'on puisse me dire ce qu'il faut penser de mon dernier rapport HijackThis et quelles sont les actions que je dois entreprendre désormais.Merci.

JPR44 · Answer

OK boulepate62, voici un nouveau rapport HijackThis :Logfile of HijackThis v1.99.1Scan saved at 00:28:25, on 19/05/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeC:\WINDOWS\AGRSMMSG.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\QuickTime\qttask.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\Program Files\Java\j2re1.4.2_06\bin\jusched.exeC:\WINDOWS\System32\GSICON.EXEC:\WINDOWS\System32\DSLAGENT.EXEC:\Program Files\Picasa2\PicasaMediaDetector.exeC:\Program Files\Winamp\winampa.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Documents and Settings\GUILLAUME\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=sslR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.connect-we.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dllO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dllO2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dllO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osbootO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exeO4 - HKLM\..\Run: [GSICONEXE] GSICON.EXEO4 - HKLM\..\Run: [DSLAGENTEXE] DSLAGENT.EXEO4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exeO4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exeO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - Startup: WkCalRem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Tout télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddList.htmlO8 - Extra context menu item: Télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddLink.htmlO9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dllO9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Translate - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnkO9 - Extra 'Tools' menuitem: LingoWare Translator... - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnkO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO14 - IERESET.INF: START_PAGE_URL=http://www.connect-we.fr/O16 - DPF: Interface Chat Voila - http://chat10.x-echo.com/version4/Applet/vchatsign.cabO16 - DPF: {0000ED9A-DFFC-11D4-8D7A-B396C6A4A836} (ToolBar NetCourrier) - http://img.medianet-technologies.com/netc/toolbar/mttoolbar.cabO16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cabO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cabO16 - DPF: {5EC7C511-CD0F-42E6-830C-1BD9882F3458} - http://www.pps.tv/O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_s...O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{1E2F5B39-473B-43CB-A905-CC1201540CF0}: NameServer = 86.64.145.144 84.103.237.144O17 - HKLM\System\CS1\Services\Tcpip\..\{1E2F5B39-473B-43CB-A905-CC1201540CF0}: NameServer = 86.64.145.144 84.103.237.144O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)

aranjuez31 · Answer

alu tousavais bcp de malades à traiter en salle d attente............========te mettre en sans échec de préférenceouvre hijackcoche et fixeO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll +O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) +O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exeO4 - HKLM\..\Run: [GSICONEXE] GSICON.EXEO4 - HKLM\..\Run: [DSLAGENTEXE] DSLAGENT.EXEO4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exeO4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exeO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - Startup: WkCalRem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE +O16 - DPF: Interface Chat Voila - http://chat10.x-echo.com/version4/Applet/vchatsign.cabO16 - DPF: {0000ED9A-DFFC-11D4-8D7A-B396C6A4A836} (ToolBar NetCourrier) - http://img.medianet-technologies.com/netc/toolbar/mttoolbar.cabO16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cabO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cabO16 - DPF: {5EC7C511-CD0F-42E6-830C-1BD9882F3458} - http://www.pps.tv/O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_s...O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab ================concernant cette délétére :C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll soit 'MSN Apps'a/ regarde si présent ds ajout/suppr :  si oui , désinstalleb / et/ou suis chemin : déma>postede travail>HDD(C)>ProgramFiles>MSN Apps<==== à mettre à la poubellec /et/ou  à défaut:  déma>'rechercher' MSN Apps et/ou stmain.dll  : virer !

JPR44 · Answer

Bonjour,J'ai utilisé HijackThis (mais pas en mode sans échec car j'ai lu un peu trop  vite ton message aranjuez31) et j'ai fixé les éléments demandés sauf :O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k qui avait semble-t'il déjà disparu.stmain.dll était présent à plusieurs endroits dans MsnApps mais pas dans 01.03.0000.1005\en-xu. Je les ai supprimés.Voici le nouveau rapport HijackThis : Logfile of HijackThis v1.99.1Scan saved at 08:06:45, on 19/05/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Windows NT\Accessoires\wordpad.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exeC:\Documents and Settings\GUILLAUME\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=sslR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.unika.comR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dllO2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dllO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Tout télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddList.htmlO8 - Extra context menu item: Télécharger avec NetXfer - C:\Program Files\Xi\NetXfer\NXAddLink.htmlO9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dllO9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Translate - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnkO9 - Extra 'Tools' menuitem: LingoWare Translator... - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnkO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO14 - IERESET.INF: START_PAGE_URL=http://www.unika.comO17 - HKLM\System\CCS\Services\Tcpip\..\{1E2F5B39-473B-43CB-A905-CC1201540CF0}: NameServer = 84.103.237.146 86.64.145.146O17 - HKLM\System\CS1\Services\Tcpip\..\{1E2F5B39-473B-43CB-A905-CC1201540CF0}: NameServer = 84.103.237.146 86.64.145.146O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)Merci.

JPR44 · Answer

Je me permets juste une petite digression au sujet de Kerio. Depuis que je l'ai installé, je ne peux plus utiliser le carnet d'adresses de ma messagerie yahoo.fr. La fenêtre http//address.mail.yahoo.com s'ouvre bien et j'ai accès à mes contacts mais si je souhaite en sélectionner un j'ai le message d'erreur suivant : "Ad blocked by KPF". J'imagine que Kerio considère cette fenêtre comme une publicité et la bloque comme les autres. Dans les options Internet de Kerio j'ai ajouté mail.yahoo.com et address.mail.yahoo.com dans les Exceptions en autorisant les popups et les cookies de ces adresses mais rien n'y fait. Quelqu'un a une idée ?

JPR44 · Answer

Je reviens également au sujet initial de ce post, à savoir le problème de la fenêtre qui s'ouvre au démarrage de Firefox (de façon aléatoire) me demandant notamment si je souhaite utiliser fr. yahoo.search comme moteur de recherche par défaut, comme ceci : https://imageshack.com/Ce problème persiste. Néanmoins mon PC est sans doute plus propre grâce aux  conseils de  boulepate62 et aranjuez31 et c'est rien que pour ça ce post a été judicieusement déplacé dans cette section.Avez-vous une idée sur ce problème en sachant que je pense que c'est lui qui est à l'origine de la disparition par moments de mes marque-pages ?Autre question : puis-je (dois-je) maintenant installer le SP2 ?Dès que je viendrai à bout de ces problèmes je me ferai un plaisir de faire un récapitulatif des actions menées.Encore merci pour votre aide.

JPR44 · Answer

Salut,Je reviens de congés et je constate que mon problème en est toujours au même stade. Quelqu'un a une idée ?Merci.

Problème Yahoo Toolbar et/ou Mozilla Firefox

12 réponses

Votre réponse

Discussions similaires

Newsletters