Infecté par YahooFatalMan

laguepe -  
j'ai un problème avec mon ordinateur. Il plante tout le temps et parfois même, il redemarre tout seul. après le redemarrage un message d'erreur s'affiche sur un écran bleu avec des codes d'erreurs. On me dit que c'est le virus YahooFatalMan qui est à l'origine de ces problèmes. Je ne sais plus comment faire.

Aidez Moi!!
--
Yan Laguepe

4 réponses

  1.  green day Modérateur
    Salut

    Télécharge ceci :

    Lien : http://www.infos-du-net.com/telecharger/HijackThis.html

    Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm

    Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.

    ++
    0
    1. laguepe Auteur
      Ok j'y vais de ce pas
      0
      1. laguepe Auteur
        Voici le rapport que j'ai eu
        il est long, mais j'espère que vous en ferez bonne usage!
        Merci.
        Logfile of HijackThis v1.99.1
        Scan saved at 15:04:25, on 31/08/2006
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\MS\SMS\CORE\BIN\CLISVCL.EXE
        C:\WINDOWS\SYSTEM32\DWRCS.EXE
        C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\MS\SMS\CLICOMP\RemCtrl\Wuser32.exe
        C:\WINDOWS\SYSTEM32\DWRCST.exe
        C:\WINDOWS\system32\igfxtray.exe
        C:\WINDOWS\system32\hkcmd.exe
        C:\WINDOWS\MS\SMS\CORE\BIN\LAUNCH32.EXE
        C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\WINDOWS\system32\ctfmon.exe
        D:\Yanick\Programmes\SuperCopier2\SuperCopier2.exe
        C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
        C:\WINDOWS\System32\alg.exe
        C:\WINDOWS\MS\SMS\clicomp\apa\Bin\smsapm32.exe
        C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
        C:\WINDOWS\MS\SMS\clicomp\SWMeter\SMAgntNT.EXE
        D:\RsFault\RsFaults.exe
        C:\Program Files\Windows Media Player\wmplayer.exe
        D:\Yanick\FlashGet\flashget.exe
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
        C:\Downloads\HijackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mtncameroon.net
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
        R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
        O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Yanick\FlashGet\jccatch.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\Yanick\FlashGet\fgiebar.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
        O4 - HKLM\..\Run: [SMS Application Launcher] C:\WINDOWS\MS\SMS\CORE\BIN\LAUNCH32.EXE
        O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
        O4 - HKCU\..\Run: [SuperCopier2.exe] D:\Yanick\Programmes\SuperCopier2\SuperCopier2.exe
        O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
        O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
        O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
        O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
        O8 - Extra context menu item: Download All by FlashGet - D:\Yanick\FlashGet\jc_all.htm
        O8 - Extra context menu item: Download using FlashGet - D:\Yanick\FlashGet\jc_link.htm
        O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
        O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
        O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
        O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
        O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
        O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Yanick\FlashGet\flashget.exe
        O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Yanick\FlashGet\flashget.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF: START_PAGE_URL=http://www.mtncameroon.net
        O16 - DPF: Casa 3rdPty - jHelp - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casahelp.cab
        O16 - DPF: Casa 3rdPty - Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casathrdpty.cab
        O16 - DPF: Casa 3rdPty - Swing 1 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing1.cab
        O16 - DPF: Casa 3rdPty - Swing 2 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing2.cab
        O16 - DPF: Casa Access Profile - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaccprofmaint.cab
        O16 - DPF: Casa Audit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaudit.cab
        O16 - DPF: Casa AWT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaawt.cab
        O16 - DPF: Casa Broadcast - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabrdcast.cab
        O16 - DPF: Casa BTR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabtr.cab
        O16 - DPF: Casa Cab Verifier - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacabverifier.cab
        O16 - DPF: Casa CBServiceOps - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacbserviceops.cab
        O16 - DPF: Casa Citi-Netting - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casanetting.cab
        O16 - DPF: Casa CitiWithin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacitiwithin.cab
        O16 - DPF: Casa Client Association - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntassoc.cab
        O16 - DPF: Casa Client Def - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntdef.cab
        O16 - DPF: Casa Code Pages - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacodepage.cab
        O16 - DPF: Casa CollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacollitems.cab
        O16 - DPF: Casa CustomReport - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacustomreport.cab
        O16 - DPF: Casa Default - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadefault.cab
        O16 - DPF: Casa DtvmrmInvestments - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadtvmrm.cab
        O16 - DPF: Casa ELC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaelc.cab
        O16 - DPF: Casa Fidelity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidelity.cab
        O16 - DPF: Casa File Delivery - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafiledelivery.cab
        O16 - DPF: Casa File Import - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafileimport.cab
        O16 - DPF: Casa Flow Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaflowmaint.cab
        O16 - DPF: Casa Framework - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaframework.cab
        O16 - DPF: Casa Global Trade Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradecommon.cab
        O16 - DPF: Casa Global Trade Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradedetail.cab
        O16 - DPF: Casa Global Trade Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradelib.cab
        O16 - DPF: Casa Global Trade PI - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradepi.cab
        O16 - DPF: Casa Global Trade Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradesummary.cab
        O16 - DPF: Casa IBM XML Parser - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaxml.cab
        O16 - DPF: Casa ILC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casailc.cab
        O16 - DPF: Casa Images - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaimages.cab
        O16 - DPF: Casa Infrastructure - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casainfr.cab
        O16 - DPF: Casa JPIPreLoader - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casajpipreloader.cab
        O16 - DPF: Casa Language ar_EG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ar_eg.cab
        O16 - DPF: Casa Language bg_BG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_bg_bg.cab
        O16 - DPF: Casa Language cs_CZ - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_cs_cz.cab
        O16 - DPF: Casa Language de_DE - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_de_de.cab
        O16 - DPF: Casa Language el_GR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_el_gr.cab
        O16 - DPF: Casa Language es_AR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_ar.cab
        O16 - DPF: Casa Language es_ES - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_es.cab
        O16 - DPF: Casa Language fr_FR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_fr_fr.cab
        O16 - DPF: Casa Language he_IL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_he_il.cab
        O16 - DPF: Casa Language hu_HU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_hu_hu.cab
        O16 - DPF: Casa Language it_IT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_it_it.cab
        O16 - DPF: Casa Language ja_JP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ja_jp.cab
        O16 - DPF: Casa Language ko_KP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ko_kp.cab
        O16 - DPF: Casa Language nl_NL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_nl_nl.cab
        O16 - DPF: Casa Language pl_PL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pl_pl.cab
        O16 - DPF: Casa Language pt_BR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pt_br.cab
        O16 - DPF: Casa Language ro_RO - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ro_ro.cab
        O16 - DPF: Casa Language ru_RU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ru_ru.cab
        O16 - DPF: Casa Language sk_SK - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_sk_sk.cab
        O16 - DPF: Casa Language th_TH - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_th_th.cab
        O16 - DPF: Casa Language tr_TR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_tr_tr.cab
        O16 - DPF: Casa Language zh_CN - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_cn.cab
        O16 - DPF: Casa Language zh_TW - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_tw.cab
        O16 - DPF: Casa Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalibs.cab
        O16 - DPF: Casa Liquidity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaliquidity.cab
        O16 - DPF: Casa List Manager - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalistmgr.cab
        O16 - DPF: Casa Lockbox - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalockbox.cab
        O16 - DPF: Casa Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casamisc.cab
        O16 - DPF: Casa Payments Banamex - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsbanamex.cab
        O16 - DPF: Casa Payments Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtscomm.cab
        O16 - DPF: Casa Payments Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsdtl.cab
        O16 - DPF: Casa Payments Disbursements - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadisbursements.cab
        O16 - DPF: Casa Payments Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtslibs.cab
        O16 - DPF: Casa Payments Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsmisc.cab
        O16 - DPF: Casa Pref Mgr - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaprefmgr.cab
        O16 - DPF: Casa Receivables Mandates - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesmandates.cab
        O16 - DPF: Casa ReceivablesDirectDebit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesdirectdebit.cab
        O16 - DPF: Casa ReceivablesInquiries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesinquiries.cab
        O16 - DPF: Casa Report - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareport.cab
        O16 - DPF: Casa Safeword - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasafeword.cab
        O16 - DPF: Casa SDR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasdr.cab
        O16 - DPF: Casa Security Admin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasecurityadmin.cab
        O16 - DPF: Casa ServForCollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforcollitems.cab
        O16 - DPF: Casa Taiwan CBR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casatwcbr.cab
        O16 - DPF: Casa Trade FI Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaficommon.cab
        O16 - DPF: Casa Trade FI Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidetail.cab
        O16 - DPF: Casa Trade FI Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafilib.cab
        O16 - DPF: Casa Trade FI Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafisummary.cab
        O16 - DPF: Casa User Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casausrmaint.cab
        O16 - DPF: CasaReceivablesServices - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesservices.cab
        O16 - DPF: CasaServForProducts - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforproducts.cab
        O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
        O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_sit...
        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
        O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaverifier.cab
        O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
        O17 - HKLM\Software\..\Telephony: DomainName = corp.mtncameroon.net
        O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
        O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
        O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
        O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINDOWS\SYSTEM32\DWRCS.EXE
        O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe

        0
        1. green day Modérateur
          re

          Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :

          ( toutes les 016)

          O16 - DPF: Casa 3rdPty - jHelp - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casahelp.cab
          O16 - DPF: Casa 3rdPty - Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casathrdpty.cab
          O16 - DPF: Casa 3rdPty - Swing 1 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing1.cab
          O16 - DPF: Casa 3rdPty - Swing 2 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing2.cab
          O16 - DPF: Casa Access Profile - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaccprofmaint.cab
          O16 - DPF: Casa Audit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaudit.cab
          O16 - DPF: Casa AWT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaawt.cab
          O16 - DPF: Casa Broadcast - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabrdcast.cab
          O16 - DPF: Casa BTR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabtr.cab
          O16 - DPF: Casa Cab Verifier - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacabverifier.cab
          O16 - DPF: Casa CBServiceOps - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacbserviceops.cab
          O16 - DPF: Casa Citi-Netting - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casanetting.cab
          O16 - DPF: Casa CitiWithin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacitiwithin.cab
          O16 - DPF: Casa Client Association - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntassoc.cab
          O16 - DPF: Casa Client Def - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntdef.cab
          O16 - DPF: Casa Code Pages - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacodepage.cab
          O16 - DPF: Casa CollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacollitems.cab
          O16 - DPF: Casa CustomReport - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacustomreport.cab
          O16 - DPF: Casa Default - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadefault.cab
          O16 - DPF: Casa DtvmrmInvestments - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadtvmrm.cab
          O16 - DPF: Casa ELC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaelc.cab
          O16 - DPF: Casa Fidelity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidelity.cab
          O16 - DPF: Casa File Delivery - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafiledelivery.cab
          O16 - DPF: Casa File Import - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafileimport.cab
          O16 - DPF: Casa Flow Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaflowmaint.cab
          O16 - DPF: Casa Framework - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaframework.cab
          O16 - DPF: Casa Global Trade Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradecommon.cab
          O16 - DPF: Casa Global Trade Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradedetail.cab
          O16 - DPF: Casa Global Trade Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradelib.cab
          O16 - DPF: Casa Global Trade PI - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradepi.cab
          O16 - DPF: Casa Global Trade Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradesummary.cab
          O16 - DPF: Casa IBM XML Parser - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaxml.cab
          O16 - DPF: Casa ILC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casailc.cab
          O16 - DPF: Casa Images - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaimages.cab
          O16 - DPF: Casa Infrastructure - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casainfr.cab
          O16 - DPF: Casa JPIPreLoader - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casajpipreloader.cab
          O16 - DPF: Casa Language ar_EG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ar_eg.cab
          O16 - DPF: Casa Language bg_BG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_bg_bg.cab
          O16 - DPF: Casa Language cs_CZ - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_cs_cz.cab
          O16 - DPF: Casa Language de_DE - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_de_de.cab
          O16 - DPF: Casa Language el_GR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_el_gr.cab
          O16 - DPF: Casa Language es_AR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_ar.cab
          O16 - DPF: Casa Language es_ES - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_es.cab
          O16 - DPF: Casa Language fr_FR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_fr_fr.cab
          O16 - DPF: Casa Language he_IL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_he_il.cab
          O16 - DPF: Casa Language hu_HU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_hu_hu.cab
          O16 - DPF: Casa Language it_IT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_it_it.cab
          O16 - DPF: Casa Language ja_JP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ja_jp.cab
          O16 - DPF: Casa Language ko_KP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ko_kp.cab
          O16 - DPF: Casa Language nl_NL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_nl_nl.cab
          O16 - DPF: Casa Language pl_PL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pl_pl.cab
          O16 - DPF: Casa Language pt_BR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pt_br.cab
          O16 - DPF: Casa Language ro_RO - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ro_ro.cab
          O16 - DPF: Casa Language ru_RU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ru_ru.cab
          O16 - DPF: Casa Language sk_SK - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_sk_sk.cab
          O16 - DPF: Casa Language th_TH - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_th_th.cab
          O16 - DPF: Casa Language tr_TR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_tr_tr.cab
          O16 - DPF: Casa Language zh_CN - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_cn.cab
          O16 - DPF: Casa Language zh_TW - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_tw.cab
          O16 - DPF: Casa Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalibs.cab
          O16 - DPF: Casa Liquidity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaliquidity.cab
          O16 - DPF: Casa List Manager - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalistmgr.cab
          O16 - DPF: Casa Lockbox - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalockbox.cab
          O16 - DPF: Casa Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casamisc.cab
          O16 - DPF: Casa Payments Banamex - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsbanamex.cab
          O16 - DPF: Casa Payments Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtscomm.cab
          O16 - DPF: Casa Payments Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsdtl.cab
          O16 - DPF: Casa Payments Disbursements - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadisbursements.cab
          O16 - DPF: Casa Payments Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtslibs.cab
          O16 - DPF: Casa Payments Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsmisc.cab
          O16 - DPF: Casa Pref Mgr - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaprefmgr.cab
          O16 - DPF: Casa Receivables Mandates - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesmandates.cab
          O16 - DPF: Casa ReceivablesDirectDebit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesdirectdebit.cab
          O16 - DPF: Casa ReceivablesInquiries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesinquiries.cab
          O16 - DPF: Casa Report - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareport.cab
          O16 - DPF: Casa Safeword - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasafeword.cab
          O16 - DPF: Casa SDR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasdr.cab
          O16 - DPF: Casa Security Admin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasecurityadmin.cab
          O16 - DPF: Casa ServForCollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforcollitems.cab
          O16 - DPF: Casa Taiwan CBR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casatwcbr.cab
          O16 - DPF: Casa Trade FI Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaficommon.cab
          O16 - DPF: Casa Trade FI Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidetail.cab
          O16 - DPF: Casa Trade FI Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafilib.cab
          O16 - DPF: Casa Trade FI Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafisummary.cab
          O16 - DPF: Casa User Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casausrmaint.cab
          O16 - DPF: CasaReceivablesServices - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesservices.cab
          O16 - DPF: CasaServForProducts - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforproducts.cab
          O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_sit...
          O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
          O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaverifier.cab

          *Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs .

          *Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle
          est cochée) puis clique sur "lancer le nettoyage"

          https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

          tuto: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

          ensuite fais le 1/ et 2/ de ce lien stp :

          virus methode preliminaire de desinfection version fr

          ++

          **tout ce que je sais, c'est que je ne sais rien ! et c'est déjà pas mal ...**
          0

          Discussions similaires

          Infecte par un virus
          sapard

          3 réponses
          Mon ordinateur a été infecté par un virus ou
          henry4002

          6 réponses
          infecté par InstantAccess
          mimi22

          22 réponses
          infecté par brontok
          yannick

          27 réponses
          infecté par trojan.generic
          blocage

          29 réponses