Mon pc devien trés lent - Page 2

O1 - Hosts:

Sorry, this GeoCities site is currently unavailable.

O1 - Hosts:

The GeoCities web site you were trying to view has temporarily exceeded its data transfer limit. Please try again later.

O1 - Hosts:

Are you the site owner? O1 - Hosts: Avoid service interruptions in the future by increasing your data transfer limit! O1 - Hosts: Find out how.

O1 - Hosts:

O1 - Hosts:

SPONSORED LINKS

O1 - Hosts: O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Reliable plans include domain & 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Includes starter web page, email & domain forwarding, 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Setup fee waived. Up to 10 emails, SpamGuard, forwarding & virus scanning.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

$50 setup fee waived. A reliable ecommerce plan, 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts: Get your own web site at
Yahoo! GeoCities O1 - Hosts:

O1 - Hosts:

O1 - Hosts: Copyright © O1 - Hosts: 2005 Yahoo! Inc. All rights reserved
O1 - Hosts: Privacy Policy O1 - Hosts: - Copyright Policy O1 - Hosts: - Guidelines O1 - Hosts: - Terms of Service O1 - Hosts: - Help O1 - Hosts:

O1 - Hosts:

O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {2BF65D1E-1545-8519-8843-F497E829B303} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar3.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll O3 - Toolbar: &Translator Internet - {8E4AA109-7239-4B85-8196-7377A53DDEFF} - D:\PROGRA~1\Antadis\TRANSL~1\DELPHI~1.DLL O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] D:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [IgfxTray] D:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] D:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [snpstd3] D:\WINDOWS\vsnpstd3.exe O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [qservices] D:\WINDOWS\qservice.exe O4 - HKCU\..\Run: [CashFiesta] C:\Downloads\Cashfiesta.exe O4 - HKCU\..\Run: [settings tool] D:\DOCUME~1\Admin\APPLIC~1\KNOBSO~1\DefaultRdrLoud.exe O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: Set As Messenger Live Display Picture - D:\Program Files\MSNShell\Bin\SetMSNDP.htm O8 - Extra context menu item: Télécharger avec FlashGet - D:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Télécharger tout avec FlashGet - D:\Program Files\FlashGet\jc_all.htm O9 - Extra button: MSN Shell 4 - {0713E8D2-850A-101B-AFC0-4210102A8DA7} - D:\Program Files\MSNShell\Bin\MSNShell.exe O9 - Extra 'Tools' menuitem: MSN Shell 4 - {0713E8D2-850A-101B-AFC0-4210102A8DA7} - D:\Program Files\MSNShell\Bin\MSNShell.exe O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15026/CTSUEng.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://tropddlabelle.spaces.live.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15026/CTPID.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "D:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - AppInit_DLLs: MsgPlusLoader.dll O20 - Winlogon Notify: igfxcui - D:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: BlueSoleil Hid Service - Unknown owner - D:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: Boonty Games - BOONTY - D:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe O23 - Service: iPod Service - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: kavsvc - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\LEXBCES.EXE O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

lance_yien · Answer

bonjour tropdlabell,

fais le pas à pas proposé ici:   virus methode preliminaire de desinfection version fr 
et colles, ici,   les 3 rapports   avec tes conclusions/ commentaires. ((Merci lyonnais92))  

a++

tropdlabell · Answer

merci bcp pour votr aide, voila le raport 

ewido anti-spyware - Scan Report
---------------------------------------------------------

 + Created at:	20:49:03 29/10/2006

 + Scan result:	



C:\Downloads\CashBar.dll -> Adware.CashFiesta : No action taken.
C:\Downloads\Cashfiesta.exe -> Adware.CashFiesta : No action taken.
C:\Downloads\ProcMod.dll -> Adware.CashFiesta : No action taken.
HKU\S-1-5-21-73586283-308236825-725345543-1003\SOFTWARE\CashFiesta -> Adware.CashFiesta : No action taken.
HKU\S-1-5-21-73586283-308236825-725345543-1003\SOFTWARE\CashFiesta\Cashfiesta -> Adware.CashFiesta : No action taken.
HKU\S-1-5-21-73586283-308236825-725345543-1003\SOFTWARE\CashFiesta\Cashfiesta\Config -> Adware.CashFiesta : No action taken.
HKU\S-1-5-21-73586283-308236825-725345543-1003\SOFTWARE\CashFiesta\Cashfiesta\Install -> Adware.CashFiesta : No action taken.
HKU\S-1-5-21-73586283-308236825-725345543-1003\SOFTWARE\CashFiesta\Cashfiesta\Update -> Adware.CashFiesta : No action taken.
[816] C:\Downloads\Cashfiesta.exe -> Adware.CashFiesta : No action taken.
C:\Downloads\craagle_1.91.rar/craagle_1.91\craagle_1.91\Craagle.exe -> Adware.Craagle : No action taken.
D:\Documents and Settings\Admin\Local Settings\Temp\_AZTMP0_\craagle_1.91\craagle_1.91\Craagle.exe -> Adware.Craagle : No action taken.
D:\Program Files\Adverts\uninst.exe -> Adware.Lop : No action taken.
D:\Program Files\SoftwareDoctor -> Adware.SoftwareDoctor : No action taken.
D:\Program Files\SoftwareDoctor\ErrorDoctor -> Adware.SoftwareDoctor : No action taken.
D:\Program Files\SoftwareDoctor\ErrorDoctor\ErrorDoctor.exe -> Adware.SoftwareDoctor : No action taken.
D:\Program Files\SoftwareDoctor\ErrorDoctor\Registry Backups -> Adware.SoftwareDoctor : No action taken.
D:\Program Files\SoftwareDoctor\ErrorDoctor\Registry Backups\2006-10-20_01-23-22.reg -> Adware.SoftwareDoctor : No action taken.
D:\Program Files\SoftwareDoctor\ErrorDoctor\Skin.ini -> Adware.SoftwareDoctor : No action taken.
D:\Program Files\SoftwareDoctor\ErrorDoctor\icon.ico -> Adware.SoftwareDoctor : No action taken.
D:\Program Files\SoftwareDoctor\ErrorDoctor\ignore.lst -> Adware.SoftwareDoctor : No action taken.
D:\Program Files\SoftwareDoctor\ErrorDoctor\skin3.swf -> Adware.SoftwareDoctor : No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B74DE36A-B95C-49A1-8F41-A09F3D187747} -> Adware.SoftwareDoctor : No action taken.
HKLM\SOFTWARE\SoftwareDoctor -> Adware.SoftwareDoctor : No action taken.
HKLM\SOFTWARE\SoftwareDoctor\ErrorDoctor -> Adware.SoftwareDoctor : No action taken.
HKLM\SOFTWARE\SoftwareDoctor\ErrorDoctor\1.4 -> Adware.SoftwareDoctor : No action taken.
D:\RECYCLER\S-1-5-21-73586283-308236825-725345543-1003\Dd60.exe/mspass/mspass.exe -> Not-A-Virus.PSWTool.Win32.Messen.103 : No action taken.
C:\Downloads\mspass.zip/mspass.exe -> Not-A-Virus.PSWTool.Win32.Messen.106 : No action taken.
D:\Documents and Settings\Admin\Bureau\LOGICIELES\mspass.zip/mspass.exe -> Not-A-Virus.PSWTool.Win32.Messen.106 : No action taken.
D:\RECYCLER\S-1-5-21-73586283-308236825-725345543-1003\Dd45.zip/msntocgi11-1/CGI/list.cgi -> Notifier.IllNotifier.10 : No action taken.
:mozilla.12:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.13:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.14:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@247realmedia[1].txt -> TrackingCookie.247realmedia : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@247realmedia[1].txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.29:D:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\1fixs7ut.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.338:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.339:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.514:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.551:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.587:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@2o7[1].txt -> TrackingCookie.2o7 : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@2o7[1].txt -> TrackingCookie.2o7 : No action taken.
:mozilla.149:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.150:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.151:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@adbrite[2].txt -> TrackingCookie.Adbrite : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@adrevolver[1].txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.181:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.182:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@adtech[2].txt -> TrackingCookie.Adtech : No action taken.
:mozilla.390:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.391:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.392:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.163:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.31:D:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\1fixs7ut.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
D:\Documents and Settings\Admin\Local Settings\Temp\Cookies\admin@atdmt[1].txt -> TrackingCookie.Atdmt : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.111:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.498:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@bluestreak[2].txt -> TrackingCookie.Bluestreak : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@burstnet[2].txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.576:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.577:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@casalemedia[1].txt -> TrackingCookie.Casalemedia : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@casinodelrio[1].txt -> TrackingCookie.Casinodelrio : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@www.casinodelrio[1].txt -> TrackingCookie.Casinodelrio : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@casinopays[2].txt -> TrackingCookie.Casinopays : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@crbanner.casinopays[2].txt -> TrackingCookie.Casinopays : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@casinotropez[2].txt -> TrackingCookie.Casinotropez : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@www.casinotropez[1].txt -> TrackingCookie.Casinotropez : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@banner.clubdicecasino[2].txt -> TrackingCookie.Clubdicecasino : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@clubdicecasino[1].txt -> TrackingCookie.Clubdicecasino : No action taken.
:mozilla.308:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Com : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@com[1].txt -> TrackingCookie.Com : No action taken.
:mozilla.211:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.212:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.213:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Comclick : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : No action taken.
:mozilla.19:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.21:D:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\1fixs7ut.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.679:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Enhance : No action taken.
:mozilla.15:D:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\1fixs7ut.default\cookies.txt -> TrackingCookie.Estat : No action taken.
:mozilla.197:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Estat : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@estat[1].txt -> TrackingCookie.Estat : No action taken.
:mozilla.693:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.102:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.103:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.104:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.105:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.219:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.220:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.221:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.222:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.782:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@as-eu.falkag[2].txt -> TrackingCookie.Falkag : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@as1.falkag[2].txt -> TrackingCookie.Falkag : No action taken.
:mozilla.341:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.342:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@fastclick[1].txt -> TrackingCookie.Fastclick : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@media.fastclick[1].txt -> TrackingCookie.Fastclick : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@fastclick[2].txt -> TrackingCookie.Fastclick : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@media.fastclick[1].txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.703:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Goclick : No action taken.
:mozilla.704:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Goclick : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@banner.goldenpalace[2].txt -> TrackingCookie.Goldenpalace : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@goldenpalace[1].txt -> TrackingCookie.Goldenpalace : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@www.goldenpalace[1].txt -> TrackingCookie.Goldenpalace : No action taken.
:mozilla.276:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.328:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.475:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.503:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.509:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@banner.grandonline[2].txt -> TrackingCookie.Grandonline : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@grandonline[1].txt -> TrackingCookie.Grandonline : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@www.grandonline[1].txt -> TrackingCookie.Grandonline : No action taken.
:mozilla.583:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.584:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.699:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.700:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.701:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.702:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.539:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Hitslink : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@ivwbox[2].txt -> TrackingCookie.Ivwbox : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@linkbuddies[1].txt -> TrackingCookie.Linkbuddies : No action taken.
:mozilla.756:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.757:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@lop[2].txt -> TrackingCookie.Lop : No action taken.
:mozilla.223:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.27:D:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\1fixs7ut.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.198:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.199:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.200:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.697:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Overture : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@data2.perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@data3.perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@overture[2].txt -> TrackingCookie.Overture : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@ads.planetactive[1].txt -> TrackingCookie.Planetactive : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@ads.pointroll[2].txt -> TrackingCookie.Pointroll : No action taken.
D:\Documents and Settings\Admin\Local Settings\Temp\Cookies\admin@ads.pointroll[1].txt -> TrackingCookie.Pointroll : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@ads.pointroll[1].txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.412:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken.
:mozilla.413:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken.
:mozilla.414:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken.
:mozilla.415:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken.
:mozilla.416:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken.
:mozilla.417:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken.
:mozilla.418:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken.
:mozilla.419:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : No action taken.
:mozilla.486:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@revenue[2].txt -> TrackingCookie.Revenue : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@revenue[2].txt -> TrackingCookie.Revenue : No action taken.
:mozilla.204:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.205:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.206:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.207:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.208:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.209:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@serving-sys[1].txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.408:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.409:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.463:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.464:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.624:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.16:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.17:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.18:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.585:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.586:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.532:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Spinbox : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@spinbox[1].txt -> TrackingCookie.Spinbox : No action taken.
:mozilla.724:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.725:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.726:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.64:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.65:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.66:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.67:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@statcounter[2].txt -> TrackingCookie.Statcounter : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@statcounter[1].txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.10:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.11:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.9:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.794:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.745:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Valueclick : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@vegasred[2].txt -> TrackingCookie.Vegasred : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@www.vegasred[2].txt -> TrackingCookie.Vegasred : No action taken.
:mozilla.36:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Weborama : No action taken.
:mozilla.37:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Weborama : No action taken.
:mozilla.38:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Weborama : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@weborama[1].txt -> TrackingCookie.Weborama : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@weborama[2].txt -> TrackingCookie.Weborama : No action taken.
:mozilla.73:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Yadro : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@yadro[2].txt -> TrackingCookie.Yadro : No action taken.
:mozilla.22:D:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\1fixs7ut.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.23:D:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\1fixs7ut.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.297:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.298:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : No action taken.
D:\Documents and Settings\Invité\Cookies\invité@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.788:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.789:D:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\pej6nkqx.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
D:\Documents and Settings\Admin\Cookies\admin@zedo[2].txt -> TrackingCookie.Zedo : No action taken.
C:\Downloads	st_swift.rar/tst_swift	st_swift	st_swift.exe -> Trojan.Small : No action taken.


::Report end

green day · Answer

Salut à vous

 tu es bien infecté !!!

le scan avec ewido sera à refaire :  No action taken. 

regle le sur "deleted" pour qui te vire tout ce qu'il te trouvera !

++

tropdlabell · Answer

merci bcp, mais j'ai toujour le meme problem ca m'enerve

green day · Answer

j'en suis persuadé !

fais le scan en ligne puis reposte un nouveau hijackthis stp

++

tropdlabell · Answer

ogfile of HijackThis v1.99.1 Scan saved at 0:48:24, on 30/10/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\LEXBCES.EXE D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\system32\LEXPPS.EXE D:\WINDOWS\system32\igfxtray.exe D:\WINDOWS\system32\hkcmd.exe D:\WINDOWS\vsnpstd3.exe D:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe d:\progra~1\intern~1\iexplore.exe D:\Program Files\Internet Explorer\iexplore.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\explorer.exe D:\PROGRA~1\MOZILL~1\FIREFOX.EXE D:\Program Files\Micro Application\Labo Photo Créatif\draw3987.exe D:\Program Files\MSN Messenger\msnmsgr.exe D:\WINDOWS\system32\rsvp.exe D:\WINDOWS\explorer.exe D:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\Downloads\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: Site Unavailable O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Sorry, this GeoCities site is currently unavailable.

O1 - Hosts:

The GeoCities web site you were trying to view has temporarily exceeded its data transfer limit. Please try again later.

O1 - Hosts:

Are you the site owner? O1 - Hosts: Avoid service interruptions in the future by increasing your data transfer limit! O1 - Hosts: Find out how.

O1 - Hosts:

O1 - Hosts:

SPONSORED LINKS

O1 - Hosts: O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Reliable plans include domain & 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Includes starter web page, email & domain forwarding, 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Setup fee waived. Up to 10 emails, SpamGuard, forwarding & virus scanning.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

$50 setup fee waived. A reliable ecommerce plan, 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts: Get your own web site at
Yahoo! GeoCities O1 - Hosts:

O1 - Hosts:

O1 - Hosts: Copyright © O1 - Hosts: 2005 Yahoo! Inc. All rights reserved
O1 - Hosts: Privacy Policy O1 - Hosts: - Copyright Policy O1 - Hosts: - Guidelines O1 - Hosts: - Terms of Service O1 - Hosts: - Help O1 - Hosts:

O1 - Hosts:

O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {2BF65D1E-1545-8519-8843-F497E829B303} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar3.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll O3 - Toolbar: &Translator Internet - {8E4AA109-7239-4B85-8196-7377A53DDEFF} - D:\PROGRA~1\Antadis\TRANSL~1\DELPHI~1.DLL O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] D:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [IgfxTray] D:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] D:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [snpstd3] D:\WINDOWS\vsnpstd3.exe O4 - HKLM\..\Run: [!ewido] "D:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [qservices] D:\WINDOWS\qservice.exe O4 - HKCU\..\Run: [settings tool] D:\DOCUME~1\Admin\APPLIC~1\KNOBSO~1\DefaultRdrLoud.exe O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: Set As Messenger Live Display Picture - D:\Program Files\MSNShell\Bin\SetMSNDP.htm O8 - Extra context menu item: Télécharger avec FlashGet - D:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Télécharger tout avec FlashGet - D:\Program Files\FlashGet\jc_all.htm O9 - Extra button: MSN Shell 4 - {0713E8D2-850A-101B-AFC0-4210102A8DA7} - D:\Program Files\MSNShell\Bin\MSNShell.exe O9 - Extra 'Tools' menuitem: MSN Shell 4 - {0713E8D2-850A-101B-AFC0-4210102A8DA7} - D:\Program Files\MSNShell\Bin\MSNShell.exe O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15026/CTSUEng.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://tropddlabelle.spaces.live.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15026/CTPID.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "D:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - AppInit_DLLs: MsgPlusLoader.dll O20 - Winlogon Notify: igfxcui - D:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: BlueSoleil Hid Service - Unknown owner - D:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: Boonty Games - BOONTY - D:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - D:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: iPod Service - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: kavsvc - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\LEXBCES.EXE O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

lance_yien · Answer

bonjour tropdlabell,

merci green day pour le relais

tropdlabell · Answer

merci bcp pour votre aide et voila le rapport Logfile of HijackThis v1.99.1 Scan saved at 2:05:32, on 30/10/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\LEXBCES.EXE D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\system32\LEXPPS.EXE D:\WINDOWS\system32\igfxtray.exe D:\WINDOWS\system32\hkcmd.exe D:\WINDOWS\vsnpstd3.exe D:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe d:\progra~1\intern~1\iexplore.exe D:\Program Files\Internet Explorer\iexplore.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\explorer.exe D:\PROGRA~1\MOZILL~1\FIREFOX.EXE D:\Program Files\Micro Application\Labo Photo Créatif\draw3987.exe D:\Program Files\MSN Messenger\msnmsgr.exe D:\WINDOWS\system32\rsvp.exe D:\Program Files\ewido anti-spyware 4.0\ewido.exe D:\WINDOWS\system32\NOTEPAD.EXE D:\Program Files\CCleaner\ccleaner.exe D:\WINDOWS\explorer.exe D:\WINDOWS\system32\NOTEPAD.EXE D:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\Downloads\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: Site Unavailable O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Sorry, this GeoCities site is currently unavailable.

O1 - Hosts:

The GeoCities web site you were trying to view has temporarily exceeded its data transfer limit. Please try again later.

O1 - Hosts:

Are you the site owner? O1 - Hosts: Avoid service interruptions in the future by increasing your data transfer limit! O1 - Hosts: Find out how.

O1 - Hosts:

O1 - Hosts:

SPONSORED LINKS

O1 - Hosts: O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Reliable plans include domain & 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Includes starter web page, email & domain forwarding, 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Setup fee waived. Up to 10 emails, SpamGuard, forwarding & virus scanning.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

$50 setup fee waived. A reliable ecommerce plan, 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts: Get your own web site at
Yahoo! GeoCities O1 - Hosts:

O1 - Hosts:

O1 - Hosts: Copyright © O1 - Hosts: 2005 Yahoo! Inc. All rights reserved
O1 - Hosts: Privacy Policy O1 - Hosts: - Copyright Policy O1 - Hosts: - Guidelines O1 - Hosts: - Terms of Service O1 - Hosts: - Help O1 - Hosts:

O1 - Hosts:

O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {2BF65D1E-1545-8519-8843-F497E829B303} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar3.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll O3 - Toolbar: &Translator Internet - {8E4AA109-7239-4B85-8196-7377A53DDEFF} - D:\PROGRA~1\Antadis\TRANSL~1\DELPHI~1.DLL O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar3.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] D:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [IgfxTray] D:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] D:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [snpstd3] D:\WINDOWS\vsnpstd3.exe O4 - HKLM\..\Run: [!ewido] "D:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [settings tool] D:\DOCUME~1\Admin\APPLIC~1\KNOBSO~1\DefaultRdrLoud.exe O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: Set As Messenger Live Display Picture - D:\Program Files\MSNShell\Bin\SetMSNDP.htm O8 - Extra context menu item: Télécharger avec FlashGet - D:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Télécharger tout avec FlashGet - D:\Program Files\FlashGet\jc_all.htm O9 - Extra button: MSN Shell 4 - {0713E8D2-850A-101B-AFC0-4210102A8DA7} - D:\Program Files\MSNShell\Bin\MSNShell.exe O9 - Extra 'Tools' menuitem: MSN Shell 4 - {0713E8D2-850A-101B-AFC0-4210102A8DA7} - D:\Program Files\MSNShell\Bin\MSNShell.exe O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15026/CTSUEng.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://tropddlabelle.spaces.live.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15026/CTPID.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "D:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - AppInit_DLLs: MsgPlusLoader.dll O20 - Winlogon Notify: igfxcui - D:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: BlueSoleil Hid Service - Unknown owner - D:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: Boonty Games - BOONTY - D:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - D:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: iPod Service - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: kavsvc - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\LEXBCES.EXE O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

tropdlabell · Answer

merci bcp pour votre aide et voila le rapport Logfile of HijackThis v1.99.1 Scan saved at 2:05:32, on 30/10/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\LEXBCES.EXE D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\system32\LEXPPS.EXE D:\WINDOWS\system32\igfxtray.exe D:\WINDOWS\system32\hkcmd.exe D:\WINDOWS\vsnpstd3.exe D:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe d:\progra~1\intern~1\iexplore.exe D:\Program Files\Internet Explorer\iexplore.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\explorer.exe D:\PROGRA~1\MOZILL~1\FIREFOX.EXE D:\Program Files\Micro Application\Labo Photo Créatif\draw3987.exe D:\Program Files\MSN Messenger\msnmsgr.exe D:\WINDOWS\system32\rsvp.exe D:\Program Files\ewido anti-spyware 4.0\ewido.exe D:\WINDOWS\system32\NOTEPAD.EXE D:\Program Files\CCleaner\ccleaner.exe D:\WINDOWS\explorer.exe D:\WINDOWS\system32\NOTEPAD.EXE D:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\Downloads\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: Site Unavailable O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts: O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Sorry, this GeoCities site is currently unavailable.

O1 - Hosts:

The GeoCities web site you were trying to view has temporarily exceeded its data transfer limit. Please try again later.

O1 - Hosts:

Are you the site owner? O1 - Hosts: Avoid service interruptions in the future by increasing your data transfer limit! O1 - Hosts: Find out how.

O1 - Hosts:

O1 - Hosts:

SPONSORED LINKS

O1 - Hosts: O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Reliable plans include domain & 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Includes starter web page, email & domain forwarding, 24x7 support.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

Setup fee waived. Up to 10 emails, SpamGuard, forwarding & virus scanning.

O1 - Hosts:

O1 - Hosts:

O1 - Hosts:

$50 setup fee waived. A reliable ecommerce plan, 24x7 support.

O1 - Hosts: