Infecté par YahooFatalMan

laguepe Messages postés 11 Date d'inscription   Statut Membre -  
green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
j'ai un problème avec mon ordinateur. Il plante tout le temps et parfois même, il redemarre tout seul. après le redemarrage un message d'erreur s'affiche sur un écran bleu avec des codes d'erreurs. On me dit que c'est le virus YahooFatalMan qui est à l'origine de ces problèmes. Je ne sais plus comment faire.

Aidez Moi!!
--
Yan Laguepe

4 réponses

  1.
    green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut

    Télécharge ceci :

    Lien : http://www.infos-du-net.com/telecharger/HijackThis.html

    Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm

    Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.

    ++
    0
  2. laguepe Messages postés 11 Date d'inscription   Statut Membre
     
    Ok j'y vais de ce pas
    0
  3. laguepe Messages postés 11 Date d'inscription   Statut Membre
     
    Voici le rapport que j'ai eu
    il est long, mais j'espère que vous en ferez bonne usage!
    Merci.
    Logfile of HijackThis v1.99.1
    Scan saved at 15:04:25, on 31/08/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\MS\SMS\CORE\BIN\CLISVCL.EXE
    C:\WINDOWS\SYSTEM32\DWRCS.EXE
    C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\MS\SMS\CLICOMP\RemCtrl\Wuser32.exe
    C:\WINDOWS\SYSTEM32\DWRCST.exe
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\MS\SMS\CORE\BIN\LAUNCH32.EXE
    C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32\ctfmon.exe
    D:\Yanick\Programmes\SuperCopier2\SuperCopier2.exe
    C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\MS\SMS\clicomp\apa\Bin\smsapm32.exe
    C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
    C:\WINDOWS\MS\SMS\clicomp\SWMeter\SMAgntNT.EXE
    D:\RsFault\RsFaults.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    D:\Yanick\FlashGet\flashget.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
    C:\Downloads\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mtncameroon.net
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Yanick\FlashGet\jccatch.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\Yanick\FlashGet\fgiebar.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [SMS Application Launcher] C:\WINDOWS\MS\SMS\CORE\BIN\LAUNCH32.EXE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
    O4 - HKCU\..\Run: [SuperCopier2.exe] D:\Yanick\Programmes\SuperCopier2\SuperCopier2.exe
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: Download All by FlashGet - D:\Yanick\FlashGet\jc_all.htm
    O8 - Extra context menu item: Download using FlashGet - D:\Yanick\FlashGet\jc_link.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Yanick\FlashGet\flashget.exe
    O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Yanick\FlashGet\flashget.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.mtncameroon.net
    O16 - DPF: Casa 3rdPty - jHelp - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casahelp.cab
    O16 - DPF: Casa 3rdPty - Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casathrdpty.cab
    O16 - DPF: Casa 3rdPty - Swing 1 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing1.cab
    O16 - DPF: Casa 3rdPty - Swing 2 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing2.cab
    O16 - DPF: Casa Access Profile - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaccprofmaint.cab
    O16 - DPF: Casa Audit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaudit.cab
    O16 - DPF: Casa AWT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaawt.cab
    O16 - DPF: Casa Broadcast - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabrdcast.cab
    O16 - DPF: Casa BTR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabtr.cab
    O16 - DPF: Casa Cab Verifier - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacabverifier.cab
    O16 - DPF: Casa CBServiceOps - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacbserviceops.cab
    O16 - DPF: Casa Citi-Netting - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casanetting.cab
    O16 - DPF: Casa CitiWithin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacitiwithin.cab
    O16 - DPF: Casa Client Association - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntassoc.cab
    O16 - DPF: Casa Client Def - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntdef.cab
    O16 - DPF: Casa Code Pages - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacodepage.cab
    O16 - DPF: Casa CollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacollitems.cab
    O16 - DPF: Casa CustomReport - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacustomreport.cab
    O16 - DPF: Casa Default - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadefault.cab
    O16 - DPF: Casa DtvmrmInvestments - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadtvmrm.cab
    O16 - DPF: Casa ELC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaelc.cab
    O16 - DPF: Casa Fidelity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidelity.cab
    O16 - DPF: Casa File Delivery - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafiledelivery.cab
    O16 - DPF: Casa File Import - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafileimport.cab
    O16 - DPF: Casa Flow Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaflowmaint.cab
    O16 - DPF: Casa Framework - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaframework.cab
    O16 - DPF: Casa Global Trade Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradecommon.cab
    O16 - DPF: Casa Global Trade Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradedetail.cab
    O16 - DPF: Casa Global Trade Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradelib.cab
    O16 - DPF: Casa Global Trade PI - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradepi.cab
    O16 - DPF: Casa Global Trade Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradesummary.cab
    O16 - DPF: Casa IBM XML Parser - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaxml.cab
    O16 - DPF: Casa ILC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casailc.cab
    O16 - DPF: Casa Images - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaimages.cab
    O16 - DPF: Casa Infrastructure - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casainfr.cab
    O16 - DPF: Casa JPIPreLoader - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casajpipreloader.cab
    O16 - DPF: Casa Language ar_EG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ar_eg.cab
    O16 - DPF: Casa Language bg_BG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_bg_bg.cab
    O16 - DPF: Casa Language cs_CZ - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_cs_cz.cab
    O16 - DPF: Casa Language de_DE - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_de_de.cab
    O16 - DPF: Casa Language el_GR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_el_gr.cab
    O16 - DPF: Casa Language es_AR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_ar.cab
    O16 - DPF: Casa Language es_ES - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_es.cab
    O16 - DPF: Casa Language fr_FR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_fr_fr.cab
    O16 - DPF: Casa Language he_IL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_he_il.cab
    O16 - DPF: Casa Language hu_HU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_hu_hu.cab
    O16 - DPF: Casa Language it_IT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_it_it.cab
    O16 - DPF: Casa Language ja_JP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ja_jp.cab
    O16 - DPF: Casa Language ko_KP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ko_kp.cab
    O16 - DPF: Casa Language nl_NL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_nl_nl.cab
    O16 - DPF: Casa Language pl_PL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pl_pl.cab
    O16 - DPF: Casa Language pt_BR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pt_br.cab
    O16 - DPF: Casa Language ro_RO - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ro_ro.cab
    O16 - DPF: Casa Language ru_RU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ru_ru.cab
    O16 - DPF: Casa Language sk_SK - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_sk_sk.cab
    O16 - DPF: Casa Language th_TH - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_th_th.cab
    O16 - DPF: Casa Language tr_TR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_tr_tr.cab
    O16 - DPF: Casa Language zh_CN - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_cn.cab
    O16 - DPF: Casa Language zh_TW - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_tw.cab
    O16 - DPF: Casa Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalibs.cab
    O16 - DPF: Casa Liquidity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaliquidity.cab
    O16 - DPF: Casa List Manager - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalistmgr.cab
    O16 - DPF: Casa Lockbox - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalockbox.cab
    O16 - DPF: Casa Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casamisc.cab
    O16 - DPF: Casa Payments Banamex - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsbanamex.cab
    O16 - DPF: Casa Payments Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtscomm.cab
    O16 - DPF: Casa Payments Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsdtl.cab
    O16 - DPF: Casa Payments Disbursements - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadisbursements.cab
    O16 - DPF: Casa Payments Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtslibs.cab
    O16 - DPF: Casa Payments Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsmisc.cab
    O16 - DPF: Casa Pref Mgr - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaprefmgr.cab
    O16 - DPF: Casa Receivables Mandates - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesmandates.cab
    O16 - DPF: Casa ReceivablesDirectDebit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesdirectdebit.cab
    O16 - DPF: Casa ReceivablesInquiries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesinquiries.cab
    O16 - DPF: Casa Report - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareport.cab
    O16 - DPF: Casa Safeword - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasafeword.cab
    O16 - DPF: Casa SDR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasdr.cab
    O16 - DPF: Casa Security Admin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasecurityadmin.cab
    O16 - DPF: Casa ServForCollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforcollitems.cab
    O16 - DPF: Casa Taiwan CBR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casatwcbr.cab
    O16 - DPF: Casa Trade FI Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaficommon.cab
    O16 - DPF: Casa Trade FI Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidetail.cab
    O16 - DPF: Casa Trade FI Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafilib.cab
    O16 - DPF: Casa Trade FI Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafisummary.cab
    O16 - DPF: Casa User Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casausrmaint.cab
    O16 - DPF: CasaReceivablesServices - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesservices.cab
    O16 - DPF: CasaServForProducts - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforproducts.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_sit...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
    O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaverifier.cab
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
    O17 - HKLM\Software\..\Telephony: DomainName = corp.mtncameroon.net
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINDOWS\SYSTEM32\DWRCS.EXE
    O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe

    0
  4. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    re

    Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :

    ( toutes les 016)

    O16 - DPF: Casa 3rdPty - jHelp - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casahelp.cab
    O16 - DPF: Casa 3rdPty - Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casathrdpty.cab
    O16 - DPF: Casa 3rdPty - Swing 1 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing1.cab
    O16 - DPF: Casa 3rdPty - Swing 2 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing2.cab
    O16 - DPF: Casa Access Profile - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaccprofmaint.cab
    O16 - DPF: Casa Audit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaudit.cab
    O16 - DPF: Casa AWT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaawt.cab
    O16 - DPF: Casa Broadcast - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabrdcast.cab
    O16 - DPF: Casa BTR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabtr.cab
    O16 - DPF: Casa Cab Verifier - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacabverifier.cab
    O16 - DPF: Casa CBServiceOps - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacbserviceops.cab
    O16 - DPF: Casa Citi-Netting - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casanetting.cab
    O16 - DPF: Casa CitiWithin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacitiwithin.cab
    O16 - DPF: Casa Client Association - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntassoc.cab
    O16 - DPF: Casa Client Def - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntdef.cab
    O16 - DPF: Casa Code Pages - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacodepage.cab
    O16 - DPF: Casa CollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacollitems.cab
    O16 - DPF: Casa CustomReport - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacustomreport.cab
    O16 - DPF: Casa Default - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadefault.cab
    O16 - DPF: Casa DtvmrmInvestments - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadtvmrm.cab
    O16 - DPF: Casa ELC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaelc.cab
    O16 - DPF: Casa Fidelity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidelity.cab
    O16 - DPF: Casa File Delivery - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafiledelivery.cab
    O16 - DPF: Casa File Import - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafileimport.cab
    O16 - DPF: Casa Flow Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaflowmaint.cab
    O16 - DPF: Casa Framework - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaframework.cab
    O16 - DPF: Casa Global Trade Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradecommon.cab
    O16 - DPF: Casa Global Trade Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradedetail.cab
    O16 - DPF: Casa Global Trade Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradelib.cab
    O16 - DPF: Casa Global Trade PI - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradepi.cab
    O16 - DPF: Casa Global Trade Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradesummary.cab
    O16 - DPF: Casa IBM XML Parser - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaxml.cab
    O16 - DPF: Casa ILC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casailc.cab
    O16 - DPF: Casa Images - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaimages.cab
    O16 - DPF: Casa Infrastructure - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casainfr.cab
    O16 - DPF: Casa JPIPreLoader - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casajpipreloader.cab
    O16 - DPF: Casa Language ar_EG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ar_eg.cab
    O16 - DPF: Casa Language bg_BG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_bg_bg.cab
    O16 - DPF: Casa Language cs_CZ - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_cs_cz.cab
    O16 - DPF: Casa Language de_DE - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_de_de.cab
    O16 - DPF: Casa Language el_GR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_el_gr.cab
    O16 - DPF: Casa Language es_AR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_ar.cab
    O16 - DPF: Casa Language es_ES - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_es.cab
    O16 - DPF: Casa Language fr_FR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_fr_fr.cab
    O16 - DPF: Casa Language he_IL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_he_il.cab
    O16 - DPF: Casa Language hu_HU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_hu_hu.cab
    O16 - DPF: Casa Language it_IT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_it_it.cab
    O16 - DPF: Casa Language ja_JP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ja_jp.cab
    O16 - DPF: Casa Language ko_KP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ko_kp.cab
    O16 - DPF: Casa Language nl_NL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_nl_nl.cab
    O16 - DPF: Casa Language pl_PL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pl_pl.cab
    O16 - DPF: Casa Language pt_BR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pt_br.cab
    O16 - DPF: Casa Language ro_RO - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ro_ro.cab
    O16 - DPF: Casa Language ru_RU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ru_ru.cab
    O16 - DPF: Casa Language sk_SK - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_sk_sk.cab
    O16 - DPF: Casa Language th_TH - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_th_th.cab
    O16 - DPF: Casa Language tr_TR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_tr_tr.cab
    O16 - DPF: Casa Language zh_CN - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_cn.cab
    O16 - DPF: Casa Language zh_TW - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_tw.cab
    O16 - DPF: Casa Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalibs.cab
    O16 - DPF: Casa Liquidity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaliquidity.cab
    O16 - DPF: Casa List Manager - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalistmgr.cab
    O16 - DPF: Casa Lockbox - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalockbox.cab
    O16 - DPF: Casa Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casamisc.cab
    O16 - DPF: Casa Payments Banamex - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsbanamex.cab
    O16 - DPF: Casa Payments Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtscomm.cab
    O16 - DPF: Casa Payments Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsdtl.cab
    O16 - DPF: Casa Payments Disbursements - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadisbursements.cab
    O16 - DPF: Casa Payments Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtslibs.cab
    O16 - DPF: Casa Payments Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsmisc.cab
    O16 - DPF: Casa Pref Mgr - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaprefmgr.cab
    O16 - DPF: Casa Receivables Mandates - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesmandates.cab
    O16 - DPF: Casa ReceivablesDirectDebit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesdirectdebit.cab
    O16 - DPF: Casa ReceivablesInquiries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesinquiries.cab
    O16 - DPF: Casa Report - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareport.cab
    O16 - DPF: Casa Safeword - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasafeword.cab
    O16 - DPF: Casa SDR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasdr.cab
    O16 - DPF: Casa Security Admin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasecurityadmin.cab
    O16 - DPF: Casa ServForCollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforcollitems.cab
    O16 - DPF: Casa Taiwan CBR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casatwcbr.cab
    O16 - DPF: Casa Trade FI Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaficommon.cab
    O16 - DPF: Casa Trade FI Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidetail.cab
    O16 - DPF: Casa Trade FI Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafilib.cab
    O16 - DPF: Casa Trade FI Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafisummary.cab
    O16 - DPF: Casa User Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casausrmaint.cab
    O16 - DPF: CasaReceivablesServices - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesservices.cab
    O16 - DPF: CasaServForProducts - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforproducts.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_sit...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
    O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaverifier.cab

    *Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs .

    *Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle
    est cochée) puis clique sur "lancer le nettoyage"

    https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

    tuto: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

    ensuite fais le 1/ et 2/ de ce lien stp :

    virus methode preliminaire de desinfection version fr

    ++

    **tout ce que je sais, c'est que je ne sais rien ! et c'est déjà pas mal ...**
    0

Discussions similaires

Infecte par un virus
sapard -
seb77150 -

3 réponses
Mon ordinateur a été infecté par un virus ou
henry4002 -
jorginho67 -

6 réponses
infecté par InstantAccess
mimi22 -
Utilisateur anonyme -

22 réponses
infecté par brontok
yannick -
lili -

27 réponses
infecté par trojan.generic
blocage -
billmaxime -

29 réponses