[hijack]aide pour le rapportFermé

Question

Bonjour tout le monde,
mon pc rame enormément depuis quelque temps . j'ai vu sur le web que tout le monde conseillé de faire un scan avec hijack ce que j'ai fait et voici le rapport :

Logfile of HijackThis v1.99.1
Scan saved at 13:20:50, on 10/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\FTRTSVC.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\system32undll32.exe
C:\apps\ABoard\ABoard.exe
C:\Program Files\NGS Mouse Driver\MouseDrv.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\dfndrff_e32.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Windows\system32\3049\ms-upd\msupdt.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\chkdsk.exe
F:\Program Files\WinRAR\WinRAR.exe
C:\Program Files\Windows Media Player\wmplayer.exe
D:\DOCUME~1\dufra\LOCALS~1\Temp\Rar$EX04.203\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: DeskbarBHO - {A8B28872-3324-4CD2-8AA3-7D555C872D96} - C:\Program Files\Deskbar\deskbar.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: TVEngine Helper /fleok=1D8A83A5C2E6107C91A475760EA83FA5EF80752B94E3D676597E4E293DC6 - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [CreativeMouse ] C:\Program Files\NGS Mouse Driver\MouseDrv.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB001" /M "Stylus D68"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [MS-Java] C:\Windows\system32\3049\start.bat
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [nhppljlv] C:\WINDOWS\system32\ugggbkyu.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [defender] C:\dfndrff_e32.exe
O4 - HKLM\..\Run: [keyboard] C:\kybrdff_e32.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT
cnx|PARAM
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - Global Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe




quelqu'un pourrait m'aider pour savoir ce qu'il va pas???
merci d'avance pour vos réponse

Utilisateur anonyme · Answer

Salut,

Télécharge SmitfraudFix (enregistre le sur le "bureau")
http://siri.urz.free.fr/Fix/SmitfraudFix.zip

Redémarres le PC en mode sans échec : tu tapotes sur la touche F8 de ton clavier (ou F5 ) et tu choisis le mode sans échec) 

- Ouvre le dossier "SmitfraudFix" et double clic sur "Smitfraudfix.cmd", choisit l 'option 2 et tu réponds oui à tout. 

Enregistre le rapport puis Copie/colle le rapport sur le forum stp.

butz · Answer

SmitFraudFix v2.120

Rapport fait à 14:12:28,00, 10/11/2006
Executé à partir de D:\Documents and Settings\dufra\Bureau\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin




J'ai aussi un problème au démarrage de mon pc
j'ai une invite ms-dos qui s'ouvre : C:\windows\system32\cmd.exe et l'ordi me marque ms-java.exe introuvable...

Utilisateur anonyme · Answer

Ok, c'est bon tu peux jeter ce programme

Télécharge, installes et mets à jour ces programmes puis scanne ton PC complétement et supprime tout ce qu'ils pourraient te trouver


A² squared: (gratuit en Français)
A-squared
Si tu as besoin d'aide avec A-squared regarde ce tutoriel: 
https://www.pcparadise.fr

Ad-Aware SE Personal: (en Anglais disponible en Français, gratuit)
Ad-aware
Si tu as besoin d'aide pour ad-Aware regarde ce tutoriel:
https://forums.cnetfrance.fr


Telecharge, installe puis mets à jour ce logiciel(Ewido), une fois que c'est fait, fais un scan complet de ton système, supprime (delete) tout ce qu'il te trouve puis colle le rapport ici 
Ewido:  (en Anglais reste gratuit après la période d'essai)
Ewido
Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html


Ensuite:

Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X; la barre anti-popup du SP2 (en haut) va se mettre à clignoter, clic dessus et choisis "accepter l'active X" pour  faire fonctionner le scan anti-virus.
Une fois qu'il a terminé colle le rapport ici stp

https://www.bitdefender.com/toolbox/

butz · Answer

---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

 + Created at:	17:00:49 10/11/2006

 + Scan result:	



C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP172\A0067616.dll -> Adware.BHO : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP203\A0094971.dll -> Adware.BHO : Cleaned with backup (quarantined).
C:\WINDOWS\system32\__delete_on_reboot__d_s_p_v_f_x_._d_l_l_ -> Adware.BHO : Cleaned with backup (quarantined).
C:\WINDOWS\system32\~isdst.tmp -> Adware.BHO : Cleaned with backup (quarantined).
[1500] C:\WINDOWS\system32\dspvfx.dll -> Adware.BHO : Error during cleaning.
[2640] C:\WINDOWS\system32\dspvfx.dll -> Adware.BHO : Error during cleaning.
[2960] C:\WINDOWS\system32\dspvfx.dll -> Adware.BHO : Error during cleaning.
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP194\A0086698.exe -> Adware.DriveCleaner : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP194\A0086701.dll -> Adware.DriveCleaner : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP196\A0087182.dll -> Adware.DriveCleaner : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP157\A0050960.dll -> Adware.HotBar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060661.exe -> Adware.HotBar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060662.exe -> Adware.HotBar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060663.exe -> Adware.HotBar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060665.dll -> Adware.HotBar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060667.exe -> Adware.HotBar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060668.dll -> Adware.HotBar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060669.dll -> Adware.HotBar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060670.exe -> Adware.HotBar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060674.exe -> Adware.Hotbar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060692.dll -> Adware.HotBar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060693.dll -> Adware.Hotbar : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP165\A0060694.dll -> Adware.Hotbar : Cleaned with backup (quarantined).
C:\Program Files\DAEMON Tools\SetupDTSB.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP195\A0087008.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP203\A0094955.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\deskbar_e31.exe/deskbar.exe -> Adware.Softomate : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96} -> Adware.Softomate : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E} -> Adware.Softomate : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{D8C2D4B4-EEAF-4EC4-B1F8-9B6ED15D5A38} -> Adware.Softomate : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\TypeLib\{A4C8F181-6CDB-4DCC-9FC9-BB9933C81E1F} -> Adware.Softomate : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DBTB00001.DBTB00001Deskbar -> Adware.Softomate : Cleaned with backup (quarantined).
HKU\S-1-5-21-2821925290-3032897391-1842929753-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A8B28872-3324-4CD2-8AA3-7D555C872D96} -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP203\A0094953.exe -> Downloader.Adload.di : Cleaned.
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP203\A0094954.exe -> Downloader.Adload.di : Cleaned.
C:\Program Files\dr.exe -> Downloader.Adload.dr : Cleaned.
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP203\A0094963.exe -> Downloader.Adload.dr : Cleaned.
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP203\A0094956.exe -> Downloader.Adload.gw : Cleaned.
:mozilla.53:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.58:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
D:\Documents and Settings\dufra\Cookies\dufra@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.60:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.61:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.80:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.81:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.82:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.125:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.28:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.121:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.122:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.128:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.129:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.130:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.40:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.41:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
:mozilla.76:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.77:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.78:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.90:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.119:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.120:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.123:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.101:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.102:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.103:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.104:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.105:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.25:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.26:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.27:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.10:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.124:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.42:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.11:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.12:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.13:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.8:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.9:D:\Documents and Settings\dufra\Application Data\Mozilla\Firefox\Profilesh0jkq4e.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP195\A0086940.exe -> Trojan.Pakes : Cleaned.
C:\dfndrff_e32.exe -> Trojan.Pakes : Cleaned.
C:
wnmff_e32.exe_tobedeleted -> Trojan.Pakes : Cleaned.


::Report end



merci pour ton aide

[hijack]aide pour le rapport

cnx|PARAM

4 réponses

Discussions similaires

Newsletters