Infecté par YahooFatalMan
laguepe
Messages postés
11
Statut
Membre
-
green day Messages postés 26722 Statut Modérateur, Contributeur sécurité -
green day Messages postés 26722 Statut Modérateur, Contributeur sécurité -
j'ai un problème avec mon ordinateur. Il plante tout le temps et parfois même, il redemarre tout seul. après le redemarrage un message d'erreur s'affiche sur un écran bleu avec des codes d'erreurs. On me dit que c'est le virus YahooFatalMan qui est à l'origine de ces problèmes. Je ne sais plus comment faire.
Aidez Moi!!
Aidez Moi!!
A voir également:
- Infecté par YahooFatalMan
- Alerte windows ordinateur infecté - Accueil - Arnaque
- L'ordinateur de simon a été infecté par un virus répertorié récemment ✓ - Forum Virus
- L'ordinateur de mustapha a été infecté par un virus répertorié récemment - Forum Virus
- Mustapha - Forum Windows
- L'ordinateur de samantha a ete infecte par un virus - Forum Virus
4 réponses
Salut
Télécharge ceci :
Lien : http://www.infos-du-net.com/telecharger/HijackThis.html
Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm
Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.
++
Télécharge ceci :
Lien : http://www.infos-du-net.com/telecharger/HijackThis.html
Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm
Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.
++
Voici le rapport que j'ai eu
il est long, mais j'espère que vous en ferez bonne usage!
Merci.
Logfile of HijackThis v1.99.1
Scan saved at 15:04:25, on 31/08/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\MS\SMS\CORE\BIN\CLISVCL.EXE
C:\WINDOWS\SYSTEM32\DWRCS.EXE
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\MS\SMS\CLICOMP\RemCtrl\Wuser32.exe
C:\WINDOWS\SYSTEM32\DWRCST.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\MS\SMS\CORE\BIN\LAUNCH32.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Yanick\Programmes\SuperCopier2\SuperCopier2.exe
C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\MS\SMS\clicomp\apa\Bin\smsapm32.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\WINDOWS\MS\SMS\clicomp\SWMeter\SMAgntNT.EXE
D:\RsFault\RsFaults.exe
C:\Program Files\Windows Media Player\wmplayer.exe
D:\Yanick\FlashGet\flashget.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Downloads\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mtncameroon.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Yanick\FlashGet\jccatch.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\Yanick\FlashGet\fgiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SMS Application Launcher] C:\WINDOWS\MS\SMS\CORE\BIN\LAUNCH32.EXE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [SuperCopier2.exe] D:\Yanick\Programmes\SuperCopier2\SuperCopier2.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download All by FlashGet - D:\Yanick\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - D:\Yanick\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Yanick\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Yanick\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.mtncameroon.net
O16 - DPF: Casa 3rdPty - jHelp - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casahelp.cab
O16 - DPF: Casa 3rdPty - Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casathrdpty.cab
O16 - DPF: Casa 3rdPty - Swing 1 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing1.cab
O16 - DPF: Casa 3rdPty - Swing 2 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing2.cab
O16 - DPF: Casa Access Profile - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaccprofmaint.cab
O16 - DPF: Casa Audit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaudit.cab
O16 - DPF: Casa AWT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaawt.cab
O16 - DPF: Casa Broadcast - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabrdcast.cab
O16 - DPF: Casa BTR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabtr.cab
O16 - DPF: Casa Cab Verifier - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacabverifier.cab
O16 - DPF: Casa CBServiceOps - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacbserviceops.cab
O16 - DPF: Casa Citi-Netting - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casanetting.cab
O16 - DPF: Casa CitiWithin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacitiwithin.cab
O16 - DPF: Casa Client Association - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntassoc.cab
O16 - DPF: Casa Client Def - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntdef.cab
O16 - DPF: Casa Code Pages - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacodepage.cab
O16 - DPF: Casa CollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacollitems.cab
O16 - DPF: Casa CustomReport - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacustomreport.cab
O16 - DPF: Casa Default - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadefault.cab
O16 - DPF: Casa DtvmrmInvestments - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadtvmrm.cab
O16 - DPF: Casa ELC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaelc.cab
O16 - DPF: Casa Fidelity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidelity.cab
O16 - DPF: Casa File Delivery - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafiledelivery.cab
O16 - DPF: Casa File Import - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafileimport.cab
O16 - DPF: Casa Flow Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaflowmaint.cab
O16 - DPF: Casa Framework - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaframework.cab
O16 - DPF: Casa Global Trade Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradecommon.cab
O16 - DPF: Casa Global Trade Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradedetail.cab
O16 - DPF: Casa Global Trade Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradelib.cab
O16 - DPF: Casa Global Trade PI - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradepi.cab
O16 - DPF: Casa Global Trade Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradesummary.cab
O16 - DPF: Casa IBM XML Parser - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaxml.cab
O16 - DPF: Casa ILC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casailc.cab
O16 - DPF: Casa Images - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaimages.cab
O16 - DPF: Casa Infrastructure - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casainfr.cab
O16 - DPF: Casa JPIPreLoader - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casajpipreloader.cab
O16 - DPF: Casa Language ar_EG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ar_eg.cab
O16 - DPF: Casa Language bg_BG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_bg_bg.cab
O16 - DPF: Casa Language cs_CZ - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_cs_cz.cab
O16 - DPF: Casa Language de_DE - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_de_de.cab
O16 - DPF: Casa Language el_GR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_el_gr.cab
O16 - DPF: Casa Language es_AR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_ar.cab
O16 - DPF: Casa Language es_ES - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_es.cab
O16 - DPF: Casa Language fr_FR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_fr_fr.cab
O16 - DPF: Casa Language he_IL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_he_il.cab
O16 - DPF: Casa Language hu_HU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_hu_hu.cab
O16 - DPF: Casa Language it_IT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_it_it.cab
O16 - DPF: Casa Language ja_JP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ja_jp.cab
O16 - DPF: Casa Language ko_KP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ko_kp.cab
O16 - DPF: Casa Language nl_NL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_nl_nl.cab
O16 - DPF: Casa Language pl_PL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pl_pl.cab
O16 - DPF: Casa Language pt_BR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pt_br.cab
O16 - DPF: Casa Language ro_RO - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ro_ro.cab
O16 - DPF: Casa Language ru_RU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ru_ru.cab
O16 - DPF: Casa Language sk_SK - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_sk_sk.cab
O16 - DPF: Casa Language th_TH - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_th_th.cab
O16 - DPF: Casa Language tr_TR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_tr_tr.cab
O16 - DPF: Casa Language zh_CN - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_cn.cab
O16 - DPF: Casa Language zh_TW - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_tw.cab
O16 - DPF: Casa Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalibs.cab
O16 - DPF: Casa Liquidity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaliquidity.cab
O16 - DPF: Casa List Manager - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalistmgr.cab
O16 - DPF: Casa Lockbox - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalockbox.cab
O16 - DPF: Casa Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casamisc.cab
O16 - DPF: Casa Payments Banamex - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsbanamex.cab
O16 - DPF: Casa Payments Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtscomm.cab
O16 - DPF: Casa Payments Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsdtl.cab
O16 - DPF: Casa Payments Disbursements - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadisbursements.cab
O16 - DPF: Casa Payments Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtslibs.cab
O16 - DPF: Casa Payments Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsmisc.cab
O16 - DPF: Casa Pref Mgr - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaprefmgr.cab
O16 - DPF: Casa Receivables Mandates - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesmandates.cab
O16 - DPF: Casa ReceivablesDirectDebit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesdirectdebit.cab
O16 - DPF: Casa ReceivablesInquiries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesinquiries.cab
O16 - DPF: Casa Report - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareport.cab
O16 - DPF: Casa Safeword - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasafeword.cab
O16 - DPF: Casa SDR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasdr.cab
O16 - DPF: Casa Security Admin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasecurityadmin.cab
O16 - DPF: Casa ServForCollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforcollitems.cab
O16 - DPF: Casa Taiwan CBR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casatwcbr.cab
O16 - DPF: Casa Trade FI Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaficommon.cab
O16 - DPF: Casa Trade FI Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidetail.cab
O16 - DPF: Casa Trade FI Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafilib.cab
O16 - DPF: Casa Trade FI Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafisummary.cab
O16 - DPF: Casa User Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casausrmaint.cab
O16 - DPF: CasaReceivablesServices - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesservices.cab
O16 - DPF: CasaServForProducts - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforproducts.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_sit...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaverifier.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
O17 - HKLM\Software\..\Telephony: DomainName = corp.mtncameroon.net
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINDOWS\SYSTEM32\DWRCS.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
il est long, mais j'espère que vous en ferez bonne usage!
Merci.
Logfile of HijackThis v1.99.1
Scan saved at 15:04:25, on 31/08/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\MS\SMS\CORE\BIN\CLISVCL.EXE
C:\WINDOWS\SYSTEM32\DWRCS.EXE
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\MS\SMS\CLICOMP\RemCtrl\Wuser32.exe
C:\WINDOWS\SYSTEM32\DWRCST.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\MS\SMS\CORE\BIN\LAUNCH32.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Yanick\Programmes\SuperCopier2\SuperCopier2.exe
C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\MS\SMS\clicomp\apa\Bin\smsapm32.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\WINDOWS\MS\SMS\clicomp\SWMeter\SMAgntNT.EXE
D:\RsFault\RsFaults.exe
C:\Program Files\Windows Media Player\wmplayer.exe
D:\Yanick\FlashGet\flashget.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Downloads\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mtncameroon.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Yanick\FlashGet\jccatch.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\Yanick\FlashGet\fgiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SMS Application Launcher] C:\WINDOWS\MS\SMS\CORE\BIN\LAUNCH32.EXE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [SuperCopier2.exe] D:\Yanick\Programmes\SuperCopier2\SuperCopier2.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download All by FlashGet - D:\Yanick\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - D:\Yanick\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Yanick\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Yanick\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.mtncameroon.net
O16 - DPF: Casa 3rdPty - jHelp - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casahelp.cab
O16 - DPF: Casa 3rdPty - Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casathrdpty.cab
O16 - DPF: Casa 3rdPty - Swing 1 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing1.cab
O16 - DPF: Casa 3rdPty - Swing 2 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing2.cab
O16 - DPF: Casa Access Profile - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaccprofmaint.cab
O16 - DPF: Casa Audit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaudit.cab
O16 - DPF: Casa AWT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaawt.cab
O16 - DPF: Casa Broadcast - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabrdcast.cab
O16 - DPF: Casa BTR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabtr.cab
O16 - DPF: Casa Cab Verifier - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacabverifier.cab
O16 - DPF: Casa CBServiceOps - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacbserviceops.cab
O16 - DPF: Casa Citi-Netting - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casanetting.cab
O16 - DPF: Casa CitiWithin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacitiwithin.cab
O16 - DPF: Casa Client Association - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntassoc.cab
O16 - DPF: Casa Client Def - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntdef.cab
O16 - DPF: Casa Code Pages - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacodepage.cab
O16 - DPF: Casa CollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacollitems.cab
O16 - DPF: Casa CustomReport - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacustomreport.cab
O16 - DPF: Casa Default - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadefault.cab
O16 - DPF: Casa DtvmrmInvestments - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadtvmrm.cab
O16 - DPF: Casa ELC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaelc.cab
O16 - DPF: Casa Fidelity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidelity.cab
O16 - DPF: Casa File Delivery - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafiledelivery.cab
O16 - DPF: Casa File Import - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafileimport.cab
O16 - DPF: Casa Flow Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaflowmaint.cab
O16 - DPF: Casa Framework - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaframework.cab
O16 - DPF: Casa Global Trade Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradecommon.cab
O16 - DPF: Casa Global Trade Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradedetail.cab
O16 - DPF: Casa Global Trade Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradelib.cab
O16 - DPF: Casa Global Trade PI - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradepi.cab
O16 - DPF: Casa Global Trade Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradesummary.cab
O16 - DPF: Casa IBM XML Parser - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaxml.cab
O16 - DPF: Casa ILC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casailc.cab
O16 - DPF: Casa Images - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaimages.cab
O16 - DPF: Casa Infrastructure - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casainfr.cab
O16 - DPF: Casa JPIPreLoader - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casajpipreloader.cab
O16 - DPF: Casa Language ar_EG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ar_eg.cab
O16 - DPF: Casa Language bg_BG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_bg_bg.cab
O16 - DPF: Casa Language cs_CZ - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_cs_cz.cab
O16 - DPF: Casa Language de_DE - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_de_de.cab
O16 - DPF: Casa Language el_GR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_el_gr.cab
O16 - DPF: Casa Language es_AR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_ar.cab
O16 - DPF: Casa Language es_ES - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_es.cab
O16 - DPF: Casa Language fr_FR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_fr_fr.cab
O16 - DPF: Casa Language he_IL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_he_il.cab
O16 - DPF: Casa Language hu_HU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_hu_hu.cab
O16 - DPF: Casa Language it_IT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_it_it.cab
O16 - DPF: Casa Language ja_JP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ja_jp.cab
O16 - DPF: Casa Language ko_KP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ko_kp.cab
O16 - DPF: Casa Language nl_NL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_nl_nl.cab
O16 - DPF: Casa Language pl_PL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pl_pl.cab
O16 - DPF: Casa Language pt_BR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pt_br.cab
O16 - DPF: Casa Language ro_RO - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ro_ro.cab
O16 - DPF: Casa Language ru_RU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ru_ru.cab
O16 - DPF: Casa Language sk_SK - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_sk_sk.cab
O16 - DPF: Casa Language th_TH - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_th_th.cab
O16 - DPF: Casa Language tr_TR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_tr_tr.cab
O16 - DPF: Casa Language zh_CN - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_cn.cab
O16 - DPF: Casa Language zh_TW - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_tw.cab
O16 - DPF: Casa Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalibs.cab
O16 - DPF: Casa Liquidity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaliquidity.cab
O16 - DPF: Casa List Manager - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalistmgr.cab
O16 - DPF: Casa Lockbox - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalockbox.cab
O16 - DPF: Casa Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casamisc.cab
O16 - DPF: Casa Payments Banamex - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsbanamex.cab
O16 - DPF: Casa Payments Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtscomm.cab
O16 - DPF: Casa Payments Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsdtl.cab
O16 - DPF: Casa Payments Disbursements - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadisbursements.cab
O16 - DPF: Casa Payments Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtslibs.cab
O16 - DPF: Casa Payments Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsmisc.cab
O16 - DPF: Casa Pref Mgr - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaprefmgr.cab
O16 - DPF: Casa Receivables Mandates - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesmandates.cab
O16 - DPF: Casa ReceivablesDirectDebit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesdirectdebit.cab
O16 - DPF: Casa ReceivablesInquiries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesinquiries.cab
O16 - DPF: Casa Report - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareport.cab
O16 - DPF: Casa Safeword - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasafeword.cab
O16 - DPF: Casa SDR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasdr.cab
O16 - DPF: Casa Security Admin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasecurityadmin.cab
O16 - DPF: Casa ServForCollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforcollitems.cab
O16 - DPF: Casa Taiwan CBR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casatwcbr.cab
O16 - DPF: Casa Trade FI Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaficommon.cab
O16 - DPF: Casa Trade FI Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidetail.cab
O16 - DPF: Casa Trade FI Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafilib.cab
O16 - DPF: Casa Trade FI Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafisummary.cab
O16 - DPF: Casa User Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casausrmaint.cab
O16 - DPF: CasaReceivablesServices - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesservices.cab
O16 - DPF: CasaServForProducts - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforproducts.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_sit...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaverifier.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
O17 - HKLM\Software\..\Telephony: DomainName = corp.mtncameroon.net
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINDOWS\SYSTEM32\DWRCS.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
re
Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :
( toutes les 016)
O16 - DPF: Casa 3rdPty - jHelp - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casahelp.cab
O16 - DPF: Casa 3rdPty - Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casathrdpty.cab
O16 - DPF: Casa 3rdPty - Swing 1 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing1.cab
O16 - DPF: Casa 3rdPty - Swing 2 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing2.cab
O16 - DPF: Casa Access Profile - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaccprofmaint.cab
O16 - DPF: Casa Audit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaudit.cab
O16 - DPF: Casa AWT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaawt.cab
O16 - DPF: Casa Broadcast - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabrdcast.cab
O16 - DPF: Casa BTR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabtr.cab
O16 - DPF: Casa Cab Verifier - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacabverifier.cab
O16 - DPF: Casa CBServiceOps - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacbserviceops.cab
O16 - DPF: Casa Citi-Netting - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casanetting.cab
O16 - DPF: Casa CitiWithin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacitiwithin.cab
O16 - DPF: Casa Client Association - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntassoc.cab
O16 - DPF: Casa Client Def - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntdef.cab
O16 - DPF: Casa Code Pages - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacodepage.cab
O16 - DPF: Casa CollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacollitems.cab
O16 - DPF: Casa CustomReport - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacustomreport.cab
O16 - DPF: Casa Default - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadefault.cab
O16 - DPF: Casa DtvmrmInvestments - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadtvmrm.cab
O16 - DPF: Casa ELC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaelc.cab
O16 - DPF: Casa Fidelity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidelity.cab
O16 - DPF: Casa File Delivery - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafiledelivery.cab
O16 - DPF: Casa File Import - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafileimport.cab
O16 - DPF: Casa Flow Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaflowmaint.cab
O16 - DPF: Casa Framework - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaframework.cab
O16 - DPF: Casa Global Trade Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradecommon.cab
O16 - DPF: Casa Global Trade Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradedetail.cab
O16 - DPF: Casa Global Trade Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradelib.cab
O16 - DPF: Casa Global Trade PI - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradepi.cab
O16 - DPF: Casa Global Trade Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradesummary.cab
O16 - DPF: Casa IBM XML Parser - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaxml.cab
O16 - DPF: Casa ILC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casailc.cab
O16 - DPF: Casa Images - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaimages.cab
O16 - DPF: Casa Infrastructure - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casainfr.cab
O16 - DPF: Casa JPIPreLoader - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casajpipreloader.cab
O16 - DPF: Casa Language ar_EG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ar_eg.cab
O16 - DPF: Casa Language bg_BG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_bg_bg.cab
O16 - DPF: Casa Language cs_CZ - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_cs_cz.cab
O16 - DPF: Casa Language de_DE - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_de_de.cab
O16 - DPF: Casa Language el_GR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_el_gr.cab
O16 - DPF: Casa Language es_AR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_ar.cab
O16 - DPF: Casa Language es_ES - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_es.cab
O16 - DPF: Casa Language fr_FR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_fr_fr.cab
O16 - DPF: Casa Language he_IL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_he_il.cab
O16 - DPF: Casa Language hu_HU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_hu_hu.cab
O16 - DPF: Casa Language it_IT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_it_it.cab
O16 - DPF: Casa Language ja_JP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ja_jp.cab
O16 - DPF: Casa Language ko_KP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ko_kp.cab
O16 - DPF: Casa Language nl_NL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_nl_nl.cab
O16 - DPF: Casa Language pl_PL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pl_pl.cab
O16 - DPF: Casa Language pt_BR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pt_br.cab
O16 - DPF: Casa Language ro_RO - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ro_ro.cab
O16 - DPF: Casa Language ru_RU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ru_ru.cab
O16 - DPF: Casa Language sk_SK - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_sk_sk.cab
O16 - DPF: Casa Language th_TH - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_th_th.cab
O16 - DPF: Casa Language tr_TR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_tr_tr.cab
O16 - DPF: Casa Language zh_CN - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_cn.cab
O16 - DPF: Casa Language zh_TW - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_tw.cab
O16 - DPF: Casa Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalibs.cab
O16 - DPF: Casa Liquidity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaliquidity.cab
O16 - DPF: Casa List Manager - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalistmgr.cab
O16 - DPF: Casa Lockbox - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalockbox.cab
O16 - DPF: Casa Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casamisc.cab
O16 - DPF: Casa Payments Banamex - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsbanamex.cab
O16 - DPF: Casa Payments Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtscomm.cab
O16 - DPF: Casa Payments Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsdtl.cab
O16 - DPF: Casa Payments Disbursements - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadisbursements.cab
O16 - DPF: Casa Payments Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtslibs.cab
O16 - DPF: Casa Payments Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsmisc.cab
O16 - DPF: Casa Pref Mgr - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaprefmgr.cab
O16 - DPF: Casa Receivables Mandates - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesmandates.cab
O16 - DPF: Casa ReceivablesDirectDebit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesdirectdebit.cab
O16 - DPF: Casa ReceivablesInquiries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesinquiries.cab
O16 - DPF: Casa Report - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareport.cab
O16 - DPF: Casa Safeword - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasafeword.cab
O16 - DPF: Casa SDR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasdr.cab
O16 - DPF: Casa Security Admin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasecurityadmin.cab
O16 - DPF: Casa ServForCollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforcollitems.cab
O16 - DPF: Casa Taiwan CBR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casatwcbr.cab
O16 - DPF: Casa Trade FI Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaficommon.cab
O16 - DPF: Casa Trade FI Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidetail.cab
O16 - DPF: Casa Trade FI Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafilib.cab
O16 - DPF: Casa Trade FI Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafisummary.cab
O16 - DPF: Casa User Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casausrmaint.cab
O16 - DPF: CasaReceivablesServices - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesservices.cab
O16 - DPF: CasaServForProducts - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforproducts.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_sit...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaverifier.cab
*Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs .
*Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle
est cochée) puis clique sur "lancer le nettoyage"
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
tuto: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
ensuite fais le 1/ et 2/ de ce lien stp :
virus methode preliminaire de desinfection version fr
++
**tout ce que je sais, c'est que je ne sais rien ! et c'est déjà pas mal ...**
Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :
( toutes les 016)
O16 - DPF: Casa 3rdPty - jHelp - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casahelp.cab
O16 - DPF: Casa 3rdPty - Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casathrdpty.cab
O16 - DPF: Casa 3rdPty - Swing 1 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing1.cab
O16 - DPF: Casa 3rdPty - Swing 2 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing2.cab
O16 - DPF: Casa Access Profile - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaccprofmaint.cab
O16 - DPF: Casa Audit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaudit.cab
O16 - DPF: Casa AWT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaawt.cab
O16 - DPF: Casa Broadcast - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabrdcast.cab
O16 - DPF: Casa BTR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabtr.cab
O16 - DPF: Casa Cab Verifier - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacabverifier.cab
O16 - DPF: Casa CBServiceOps - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacbserviceops.cab
O16 - DPF: Casa Citi-Netting - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casanetting.cab
O16 - DPF: Casa CitiWithin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacitiwithin.cab
O16 - DPF: Casa Client Association - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntassoc.cab
O16 - DPF: Casa Client Def - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntdef.cab
O16 - DPF: Casa Code Pages - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacodepage.cab
O16 - DPF: Casa CollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacollitems.cab
O16 - DPF: Casa CustomReport - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacustomreport.cab
O16 - DPF: Casa Default - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadefault.cab
O16 - DPF: Casa DtvmrmInvestments - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadtvmrm.cab
O16 - DPF: Casa ELC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaelc.cab
O16 - DPF: Casa Fidelity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidelity.cab
O16 - DPF: Casa File Delivery - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafiledelivery.cab
O16 - DPF: Casa File Import - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafileimport.cab
O16 - DPF: Casa Flow Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaflowmaint.cab
O16 - DPF: Casa Framework - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaframework.cab
O16 - DPF: Casa Global Trade Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradecommon.cab
O16 - DPF: Casa Global Trade Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradedetail.cab
O16 - DPF: Casa Global Trade Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradelib.cab
O16 - DPF: Casa Global Trade PI - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradepi.cab
O16 - DPF: Casa Global Trade Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradesummary.cab
O16 - DPF: Casa IBM XML Parser - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaxml.cab
O16 - DPF: Casa ILC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casailc.cab
O16 - DPF: Casa Images - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaimages.cab
O16 - DPF: Casa Infrastructure - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casainfr.cab
O16 - DPF: Casa JPIPreLoader - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casajpipreloader.cab
O16 - DPF: Casa Language ar_EG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ar_eg.cab
O16 - DPF: Casa Language bg_BG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_bg_bg.cab
O16 - DPF: Casa Language cs_CZ - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_cs_cz.cab
O16 - DPF: Casa Language de_DE - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_de_de.cab
O16 - DPF: Casa Language el_GR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_el_gr.cab
O16 - DPF: Casa Language es_AR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_ar.cab
O16 - DPF: Casa Language es_ES - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_es.cab
O16 - DPF: Casa Language fr_FR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_fr_fr.cab
O16 - DPF: Casa Language he_IL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_he_il.cab
O16 - DPF: Casa Language hu_HU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_hu_hu.cab
O16 - DPF: Casa Language it_IT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_it_it.cab
O16 - DPF: Casa Language ja_JP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ja_jp.cab
O16 - DPF: Casa Language ko_KP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ko_kp.cab
O16 - DPF: Casa Language nl_NL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_nl_nl.cab
O16 - DPF: Casa Language pl_PL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pl_pl.cab
O16 - DPF: Casa Language pt_BR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pt_br.cab
O16 - DPF: Casa Language ro_RO - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ro_ro.cab
O16 - DPF: Casa Language ru_RU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ru_ru.cab
O16 - DPF: Casa Language sk_SK - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_sk_sk.cab
O16 - DPF: Casa Language th_TH - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_th_th.cab
O16 - DPF: Casa Language tr_TR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_tr_tr.cab
O16 - DPF: Casa Language zh_CN - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_cn.cab
O16 - DPF: Casa Language zh_TW - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_tw.cab
O16 - DPF: Casa Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalibs.cab
O16 - DPF: Casa Liquidity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaliquidity.cab
O16 - DPF: Casa List Manager - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalistmgr.cab
O16 - DPF: Casa Lockbox - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalockbox.cab
O16 - DPF: Casa Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casamisc.cab
O16 - DPF: Casa Payments Banamex - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsbanamex.cab
O16 - DPF: Casa Payments Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtscomm.cab
O16 - DPF: Casa Payments Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsdtl.cab
O16 - DPF: Casa Payments Disbursements - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadisbursements.cab
O16 - DPF: Casa Payments Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtslibs.cab
O16 - DPF: Casa Payments Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsmisc.cab
O16 - DPF: Casa Pref Mgr - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaprefmgr.cab
O16 - DPF: Casa Receivables Mandates - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesmandates.cab
O16 - DPF: Casa ReceivablesDirectDebit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesdirectdebit.cab
O16 - DPF: Casa ReceivablesInquiries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesinquiries.cab
O16 - DPF: Casa Report - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareport.cab
O16 - DPF: Casa Safeword - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasafeword.cab
O16 - DPF: Casa SDR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasdr.cab
O16 - DPF: Casa Security Admin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasecurityadmin.cab
O16 - DPF: Casa ServForCollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforcollitems.cab
O16 - DPF: Casa Taiwan CBR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casatwcbr.cab
O16 - DPF: Casa Trade FI Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaficommon.cab
O16 - DPF: Casa Trade FI Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidetail.cab
O16 - DPF: Casa Trade FI Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafilib.cab
O16 - DPF: Casa Trade FI Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafisummary.cab
O16 - DPF: Casa User Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casausrmaint.cab
O16 - DPF: CasaReceivablesServices - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesservices.cab
O16 - DPF: CasaServForProducts - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforproducts.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_sit...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaverifier.cab
*Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs .
*Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle
est cochée) puis clique sur "lancer le nettoyage"
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
tuto: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
ensuite fais le 1/ et 2/ de ce lien stp :
virus methode preliminaire de desinfection version fr
++
**tout ce que je sais, c'est que je ne sais rien ! et c'est déjà pas mal ...**