Win32:Adware-gen

Question

Bonjour,Alors que j'étais sur MSN Messenger, j'ai malencontreusement cliqué sur un dossier "photo223", lequel s'est installé dans le burreau. Attendant effectivement des photos, j'ai cliqué dessus et des petis programmes en sont sorti. J'ai tout de suite vérifié avec Avast, qui m'a indiqué qu'il s'agissait de Win32:Adware-gen.J'ai suivi plusieurs conseils. En  "mode sans échec":- j'ai tout d'abord désinstallé par le paneau de configuration/suprimerPrograme  c\programeFile\RXTToolbar- j'ai scanné mon ordi avec "Spybot". Il a trouvé "AvenuA inc", "CasaleMedia", "Doubleclick", "Downloader.TsupdateL", FastClick", "MediaFlex", "Smitfraud", "TargetSaver". Je les ai suprimé. Mais il en restait, alors j'ai suivi vos conseils.-j'ai scanné avec "Ewido" :---------------------------------------------------------ewido anti-spyware - Scan Report--------------------------------------------------------- + Created at:	00:20:07 19/09/2006 + Scan result:	C:\Program Files\Fichiers communs\{739DB921-06FC-1036-0623-030304300021}\Update.exe -> Adware.Agent : No action taken.C:\WINDOWS\system32\adimage.dll -> Adware.Aureate : No action taken.C:\WINDOWS\system32\msipcsv.exe -> Adware.Aureate : No action taken.C:\Program Files\dossier DivX\Div X\DivX Pro Codec\gain_trickler_3202.exe -> Adware.Gator : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\8TONCJ0F\Installer[1].exe -> Adware.Look2Me : No action taken.C:\warebundlenewer.exe -> Adware.Look2Me : No action taken.C:\Program Files\Fichiers communs\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\8XW5G7Q7\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\8XW5G7Q7\ac3_0010[2].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\ANAJGL8H\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\ANAJGL8H\ac3_0010[2].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\B79TXLDA\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\B79TXLDA\ac3_0010[2].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\D7NCY453\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\D7NCY453\ac3_0010[2].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\E8IHRDKW\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\E8IHRDKW\ac3_0010[2].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\E8IHRDKW\ac3_0010[3].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\N3HDDPDE\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\N3HDDPDE\ac3_0010[2].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\NRHFMNJB\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\NRHFMNJB\ac3_0010[2].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\SXYJKLUF\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\TYEZUQRK\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\TYEZUQRK\ac3_0010[2].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\TYEZUQRK\ac3_0010[3].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\TYEZUQRK\ac3_0010[4].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\WXQB8J6F\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\WXQB8J6F\ac3_0010[2].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\ZQVAVBM4\ac3_0010[1].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\ZQVAVBM4\ac3_0010[2].exe -> Downloader.Small : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\8XW5G7Q7\MTE3NDI6ODoxNg[1].exe -> Downloader.Small.buy : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\B79TXLDA\SS1001[1].exe -> Dropper.Small.qn : No action taken.C:\SS1001newer.exe -> Dropper.Small.qn : No action taken.C:\Documents and Settings\karine\Bureau\Xinstall.exe -> Heuristic.Win32.Morphine-Crypted : No action taken.C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\SXYJKLUF\Xinstall[1].exe -> Heuristic.Win32.Morphine-Crypted : No action taken.C:\WINDOWS\system32\Xinstall.exe -> Heuristic.Win32.Morphine-Crypted : No action taken.:mozilla.15:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.:mozilla.16:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.:mozilla.21:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.2o7 : No action taken.C:\Documents and Settings\karine\Cookies\karine@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.:mozilla.24:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Adtech : No action taken.C:\Documents and Settings\karine\Cookies\karine@adtech[2].txt -> TrackingCookie.Adtech : No action taken.:mozilla.12:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.C:\Documents and Settings\karine\Local Settings\Temp\Cookies\karine@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.C:\Documents and Settings\karine\Cookies\karine@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.:mozilla.42:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Estat : No action taken.C:\Documents and Settings\karine\Cookies\karine@as1.falkag[2].txt -> TrackingCookie.Falkag : No action taken.:mozilla.35:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.:mozilla.77:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.:mozilla.78:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.:mozilla.79:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.:mozilla.80:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.:mozilla.81:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.C:\Documents and Settings\karine\Cookies\karine@serving-sys[2].txt -> TrackingCookie.Serving-sys : No action taken.:mozilla.10:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.:mozilla.11:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.:mozilla.6:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.C:\Documents and Settings\karine\Cookies\karine@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : No action taken.:mozilla.85:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.:mozilla.86:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.:mozilla.87:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.C:\Documents and Settings\karine\Cookies\karine@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : No action taken.:mozilla.8:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Weborama : No action taken.:mozilla.9:C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\cookies.txt -> TrackingCookie.Weborama : No action taken.C:\Documents and Settings\karine\Cookies\karine@weborama[2].txt -> TrackingCookie.Weborama : No action taken.C:\Documents and Settings\karine\Local Settings\Temp\Cookies\karine@weborama[2].txt -> TrackingCookie.Weborama : No action taken.C:\Documents and Settings\karine\Cookies\karine@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : No action taken.C:\Documents and Settings\karine\Cookies\karine@zedo[2].txt -> TrackingCookie.Zedo : No action taken.C:\Documents and Settings\karine\Application Data\Mozilla\Firefox\Profiles\zcuot1fj.default\Cache\19671FCBd01 -> Worm.Licat.c : No action taken.C:\Documents and Settings\karine\Bureau\photo223.PIF -> Worm.Licat.c : No action taken.C:\Program Files\MSN Messenger\msnmsgr.exe -> Worm.Licat.c : No action taken.::Report endJ'ai tout suprimé.-scan avec BitDefender: Scan path: A:\;C:\;D:\;	 	  	 	 StatisticsTime	01:38:40Files	242143Folders	5710Boot Sectors	2Archives	6642Packed Files	370	 	 ResultsIdentified Viruses	7Infected Files	18Suspect Files	0Warnings	0Disinfected	0Deleted Files	17	 	 Engines InfoVirus Definitions	411218Engine build	AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)Scan plugins	2Archive plugins	10Unpack plugins	2E-mail plugins	1System plugins	1	 	 Scan SettingsFirst Action	DisinfectSecond Action	DeleteHeuristics	YesEnable Warnings	YesScanned Extensions	*;Exclude Extensions	 Scan Emails	YesScan Archives	YesScan Packed	YesScan Files	YesScan Boot	Yes	 	  Scanned File	 StatusC:\Documents and Settings\karine\Bureau\drsmartload1135a.exe	Infected with: Generic.Adload.C5F7C6C3C:\Documents and Settings\karine\Bureau\drsmartload1135a.exe	Disinfection failedC:\Documents and Settings\karine\Bureau\drsmartload1135a.exe	DeletedC:\Documents and Settings\karine\Bureau\spren.exe	Infected with: Generic.Kelvir.33B10717C:\Documents and Settings\karine\Bureau\spren.exe	Disinfection failedC:\Documents and Settings\karine\Bureau\spren.exe	DeletedC:\Documents and Settings\karine\Bureau\sprY.exe	Infected with: Generic.Kelvir.300379AAC:\Documents and Settings\karine\Bureau\sprY.exe	Disinfection failedC:\Documents and Settings\karine\Bureau\sprY.exe	DeletedC:\Documents and Settings\karine\Bureau\Xinstall.exe	Infected with: Dropped:Trojan.Purityad.EC:\Documents and Settings\karine\Bureau\Xinstall.exe	Disinfection failedC:\Documents and Settings\karine\Bureau\Xinstall.exe	Delete failedC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\DP8DP5X2\loader[1].exe	Infected with: Trojan.Downloader.VB.UUC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\DP8DP5X2\loader[1].exe	Disinfection failedC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\DP8DP5X2\loader[1].exe	DeletedC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\DP8DP5X2\spren[2].exe	Infected with: Generic.Kelvir.33B10717C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\DP8DP5X2\spren[2].exe	Disinfection failedC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\DP8DP5X2\spren[2].exe	DeletedC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\E8IHRDKW\sprY[1].exe	Infected with: Generic.Kelvir.300379AAC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\E8IHRDKW\sprY[1].exe	Disinfection failedC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\E8IHRDKW\sprY[1].exe	DeletedC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\SXYJKLUF\Xinstall[1].exe	Infected with: Dropped:Trojan.Purityad.EC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\SXYJKLUF\Xinstall[1].exe	Disinfection failedC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\SXYJKLUF\Xinstall[1].exe	DeletedC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\TYEZUQRK\drsmartload1135a[1].exe	Infected with: Generic.Adload.C5F7C6C3C:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\TYEZUQRK\drsmartload1135a[1].exe	Disinfection failedC:\Documents and Settings\karine\Local Settings\Temporary Internet Files\Content.IE5\TYEZUQRK\drsmartload1135a[1].exe	DeletedC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pa_11.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pa_12.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pa_13.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pen.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pencil.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\play.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\plus.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pntbrush.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\polygon.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\polylaso.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\position.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\prev.jpg	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\prevdsbl.jpg	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\previewe.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\previewn.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\prevover.jpg	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pr_01.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pr_02.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pr_03.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pr_04.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\pucker.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\quicmask.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imageseconstr.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imagesecord.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imagesectangl.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imageseflectn.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imagesegenate.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imagesestore.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imagesewind.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imagesollprev.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imagesotate.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imagesotateop.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imagesoundrec.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\imagesubstamp.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\savesele.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\sa_01.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\scale.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\scrnful2.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\scrnfull.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\scrnstnd.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\selecadd.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\selecexc.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\selecint.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\selecmov.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\selecnew.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\selecsub.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\select.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\se_02.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\se_03.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\se_04.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\se_05.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\se_06.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\shapelyr.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\sharpen.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\shift.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\shiftpix.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\skew.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\slicback.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\slicbacw.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\slice.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\slicforw.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\slicfrnt.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\slicimag.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\sliclayr.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\sliclink.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\slicnoim.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\slicroll.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\slicslct.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\slicvisi.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\smudge.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\spafter.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\spbefore.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\splash.jpg	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\sponge.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\stanmode.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\stop.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\strokpth.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\switch_c.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ab0.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ab0over.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ab1.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ab1over.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ab2.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ab2over.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	abhelp.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	abhelpover.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	haw.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ip.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ouchup.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	rackbal.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ranspar.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	rash.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	riangl2.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	riangle.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	r_01.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	r_02.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	r_03.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	r_04.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	r_05.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	r_06.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	sume.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ween.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	wirlccw.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	wirlcw.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ype.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ypebase.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ypekern.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ypelayr.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ypelead.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ypemask.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ypesize.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	ypetrck.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_01.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_02.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_03.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_04.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_05.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_06.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_07.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_08.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_09a.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_09b.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_10a.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_10b.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_10c.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images	y_10d.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\vertscal.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\vert_typ.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_01.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_03.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_04.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_05.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_06.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_07.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_08.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_09.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_10.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_11.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_12.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_13.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_14.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_15.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\ve_16.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wand.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\warp.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\warptype.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wa_01.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wa_02.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wa_03.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wa_04.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wa_05.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wa_06.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wbclredt.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wbclrlck.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wbclrsel.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\wbclrshf.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\we_01.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\we_04.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\workpath.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\zoom.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\zoomin.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\images\zoomout.gif	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\PS6front.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\PS6front2.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_mac.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_mac2.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_mac3.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_mac4.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_mac5.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_mac6.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_mac7.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_win.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_win2.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_win3.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_win4.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_win5.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_win6.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\qrc_win7.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Aide\version.htm	CleanC:\Program Files\Adobe\Photoshop 6.0\Bib.dll	CleanC:\Program Files\Adobe\Photoshop 6.0\CoolType.dll	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Accélérateur.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Animations ImageReady\Animation fruit.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Animations ImageReady\Bombe.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Animations ImageReady\Ecrire.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Animations ImageReady\Main.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Animations ImageReady\Mélangeur.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Astronaute (CMJN).tif	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Audio.pdf	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Cascade (16 bits).tif	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\Accentuation.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\Créer bouton.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\Enregistrement multiformat.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\GIF (128 couleurs).exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\GIF (64 couleurs).exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\GIF(32, pas de tramage).exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\JPEG (qualité 10).exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\JPEG (qualité 30).exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\JPEG (qualité 60).exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\Limiter 350, JPG 30.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\Limiter à 200x200 pixels.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets ImageReady\Limiter à 64X64 pixels.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets Photoshop\Changer mode conditionnel.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets Photoshop\Créer bouton.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets Photoshop\Créer ton sépia.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets Photoshop\Enreg au format JPEG Moy.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets Photoshop\Enreg au format PDF PS.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets Photoshop\Image avec ombre portée.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets Photoshop\Limiter à 300 pixels.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets Photoshop\Limiter à 64 pixels.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Droplets\Droplets Photoshop\Photo ancienne.exe	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Dune.tif	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Joli.tif	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Mains.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Ours.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Page web chaise.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Science.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Tampon.ai	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Tour Eiffel.tif	CleanC:\Program Files\Adobe\Photoshop 6.0\Exemples\Zébré.psd	CleanC:\Program Files\Adobe\Photoshop 6.0\ExtRsrc.dll	CleanC:\Program Files\Adobe\Photoshop 6.0\Helpers\Jump To HTML Editor\Adobe GoLive 5.0.lnk	CleanC:\Program Files\Adobe\Photoshop 6.0\Helpers\Jump To HTML Editor\Bloc-notes.lnk	CleanC:\Program Files\Adobe\Photoshop 6.0\Helpers\Preview In\Internet Explorer.lnk	CleanC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019297.exe	Infected with: Trojan.Downloader.Small.BOJC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019297.exe	Disinfection failedC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019297.exe	DeletedC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019315.exe	Infected with: Trojan.Canbede.LC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019315.exe	Disinfection failedC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019315.exe	DeletedC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019331.exe	Infected with: Generic.Adload.C5F7C6C3C:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019331.exe	Disinfection failedC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019331.exe	DeletedC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019332.exe	Infected with: Generic.Kelvir.33B10717C:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019332.exe	Disinfection failedC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019332.exe	DeletedC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019333.exe	Infected with: Generic.Kelvir.300379AAC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019333.exe	Disinfection failedC:\System Volume Information\_restore{58E8BEBA-26A4-45ED-9D92-ED376219F13B}\RP50\A0019333.exe	DeletedC:\WINDOWS\system32\drsmartload1135a.exe	Infected with: Generic.Adload.C5F7C6C3C:\WINDOWS\system32\drsmartload1135a.exe	Disinfection failedC:\WINDOWS\system32\drsmartload1135a.exe	DeletedC:\WINDOWS\system32\spren.exe	Infected with: Generic.Kelvir.33B10717C:\WINDOWS\system32\spren.exe	Disinfection failedC:\WINDOWS\system32\spren.exe	DeletedC:\WINDOWS\system32\sprY.exe	Infected with: Generic.Kelvir.300379AAC:\WINDOWS\system32\sprY.exe	Disinfection failedC:\WINDOWS\system32\sprY.exe	DeletedC:\WINDOWS\system32\Xinstall.exe	Infected with: Dropped:Trojan.Purityad.EC:\WINDOWS\system32\Xinstall.exe	Disinfection failedC:\WINDOWS\system32\Xinstall.exe	Deleted-scan avec hijack :Logfile of HijackThis v1.99.1Scan saved at 21:50:24, on 19/09/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Antivirus\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXER1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.frR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.frR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.orange.fr/portailR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.frR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=1c02&lc=...R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=1c02&lc=...R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://desktop.presario.net/scripts/redirectors/presario/deskredir2.dll?s=consume...R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.frR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://mmjb.musicmatch.com/mmjb/process.cgi?REQUEST=HOME&VERSION=7.10.1045&LANG=F...R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll (file missing)O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exeO4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exeO4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [QT4HPOT] C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXEO4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exeO4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /sO4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exeO4 - HKLM\..\Run: [CARPService] carpserv.exeO4 - HKLM\..\Run: [AtiPTA] atiptaxx.exeO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ANTIVI~2\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [explorer] C:\Documents and Settings\karine\Bureau\Xinstall.exeO4 - HKLM\..\Run: [!ewido] "C:\Program Files\Antivirus\ewido anti-spyware 4.0\ewido.exe" /minimizedO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXEO4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXEO4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: Tout télécharger en utilisant FlashGet - C:\Program Files\Internet\Télechargement\FlashGet\jc_all.htmO8 - Extra context menu item: Télécharger en utilisant FlashGet - C:\Program Files\Internet\Télechargement\FlashGet\jc_link.htmO9 - Extra button: Sites Perso - {06FE5D05-8F11-11d2-804F-00105A133818} - http://compaqnet.ifrance.com/heberg/accueil (file missing)O9 - Extra 'Tools' menuitem: Compaq France - {06FE5D05-8F11-11d2-804F-00105A133818} - http://compaqnet.ifrance.com/heberg/accueil (file missing)O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin
pjpi150_05.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin
pjpi150_05.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\JetCar.exe (file missing)O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\JetCar.exe (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO14 - IERESET.INF: START_PAGE_URL=https://www.orange.fr/portailO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs:  sockspy.dllO20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dllO23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Antivirus\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Antivirus\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Antivirus\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Antivirus\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\System32\drivers\CDAC11BA.EXEO23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\Antivirus\ewido anti-spyware 4.0\guard.exeO23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exeO23 - Service: HPWirelessMgr - Hewlett-Packard Co. - C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exeO23 - Service: wampapache - Unknown owner - c:\wamp\apache2\bin\Apache.exe" -k runservice (file missing)O23 - Service: wampmysqld - Unknown owner - c:\wamp\mysql\bin\mysqld-nt.exeJe n'ai rien touché lors de ce dernier scan. Maintenant, que dois-je suprimer?Faut-il réinstaller msn? ou d'autre programme? Tout est-il nettoyé?Mon ordi ne semble pas avoir de problème, mis à part le lancement automatique de MSN (version de base sur l'ordi), ainsi que le lancement d'une page Internet Explorer, alors que je me connecte avec Mozilla. Bien sur, Avast me signale toujours un Virus au moment où je me connecte.Je vous remercie à l'avance de votre aide.Aurélie

plouf plouf · Answer

Bonjour Aurélie21,
Juste histoire de faire avancer un peu le "schmiliblick" -:)) peux tu ,stp relancer ewido , à la fin du scan tu cliques/"apply all actions"
Ps: Pour la suite , quelqu'un d'autre ,s'en chargera probablement ..;-)
a+
Plouf Plouf

plouf plouf · Answer

Bonsoir aurélie21,
Dommage , que tu n'as pas posté le rapport .
En ce qui me concerne , l'aide s'arrêtera là , comme je l'avais dit dans mon premier post . Pour la suite , quelqu'un d'autre, s'en chargera , probablement..
a+
Plouf plouf
Bonne soirée

^^Marie^^ · Answer

Slt,

Ton Ewido == > no action taken == > n'a pas fonctionné

Fait ce qui suit :

1/

C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
Télécharge ici :
https://www.ccleaner.com/ccleaner/download
Tutorial ici:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

D – Ewido
https://www.malekal.com/tutorial-et-guide-ewido-v4/
ou
http://www.infos-du-net.com/telecharger/Ewido-Anti-Malware.html

Mets le à jour en cliquant update now.
Fais un "complete system scan".
A la fin du scan, vérifie qu'il y est bien marqué "delete à côté de chaque malware et clique seulement sur : "Apply all actions"
Ensuite, clique sur "Save Report " puis "Save report as" et sauve le rapport dans tes documents.

Copie/colle le rapport

===============================

2/

Telecharge la derniere version stp

http://siri.urz.free.fr/Fix/SmitfraudFix.zip

Télécharge ceci: (merci a S!RI pour ce programme).
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Exécute le, Double click sur Smitfraudfix.cmd choisit l’option 1, il va générer un rapport
Copie/colle le sur le poste stp. ----------------------------------------------------------------------------
Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).
----------------------------------------------------------------------------
Relance le programme Smitfraud,
Cette fois choisit l’option 2, répond oui a tous ;
Sauvegarde le rapport, Redémarre en mode normal, copie/colle le rapport sauvegardé sur le forum

========================================
Refais un Hitjackthis

A++

^^Marie^^ · Answer

UPJe fais un ""up"", j'ai un soucis de pc, s'i un autre helpers pouvait prendre la relèveSVPMerci

Séb08 · Answer

Je fais un ""up"", j'ai un soucis de pc, s'i un autre helpers pouvait prendre la relève

SVP
Merci

Bonjour m'dame !
Oui m'dame !
A vos ordres m'dame !

:D

slt Aurélie,

je viens d'effectuer un scan avec smitfraudfix. Il me propose de faire une restauration système, mais à quand remonte t'elle? Est-ce que cela à un risque pour mes données?

??

Tu as bien fais ce qu'il y a d'indiqué ?

A+

Séb08 · Answer

Remet un log Hijack STPA+

Séb08 · Answer

Donc il doit être ici :

C:\Documents and Settings\karine\Bureau\Alfa.exe

Vire le.

Mais il aurait du être virer par le scan AV en ligne.

Refait en un STP et colle le rapport ainsi qu'un rapport Hijack a la suite .

A+

Win32:Adware-gen

7 réponses

Votre réponse

Discussions similaires

Newsletters