[Virus] Win32.Perlovga.A (Copy.exe, Autorun)Fermé

Question

Salut tout le monde,
Mon PC est infecté par le virus "Win32Perlovga.A"
J'utilse BitDefender 8 Pro comme antivirus
Lors des analyses il a détecté le fichier Copy.exe sur presque toute les partitions
Or il se regénère à chaque fois que je veux accèder à un disque
Il y a aussi les fichiers "autorun.inf" qui se créent sur la racine
de toute les partitions aussi
A noter aussi la présence de deux processus "temp1" et "temp2" chargés
Comment je peux me débarasser de ce virus S'il Vous Plait.

Séb08 · Answer

slt,

Regarde bien et applique ce qui est indiqué en gras pour les 2 installations .

==================================

Télécharge et installe ce log :

ewido (gratuit même après la période d’essai) 
Téléchargement :
ewido
Cliques sur « update » fais les mise à jour ensuite clique sur « scanner » puis sur « complete scan system ».
Tuto pour la version 4 d’Ewido :
https://www.malekal.com/tutorial-et-guide-ewido-v4/

Met le à jour comme indiqué, lance le « delete » (supprime) tout ce qu’il te trouve et copie/colle moi le rapport.

Puis :


télécharge HijackThis (version francaise) ici: 
hijackthis

Dézippe le dans un dossier prévu à cet effet. 

Par exemple C:\hijackthis < Enregistre le bien dans c : ! 

Démo (merci à Balltrap) :
instalation hijackthis
http://pageperso.aol.fr/balltrap34/Hijenr.gif

Lance le puis: 
clique sur "faire un scan et sauvegarder le log" (cf démo) 
faire un copier coller du log entier sur le forum 

Démo : (merci à balltrap34 pour cette réalisation) 
http://pageperso.aol.fr/balltrap34/demohijack.htm 

Bon courage

a+

Stahn · Answer

Voilà les 2 logfiles :

ewido anti-spyware - Scan Report
---------------------------------------------------------

 + Created at:	21:00:08 22/11/2006

 + Scan result:	



C:\_RESTORE\TEMP\IPCCLI~1.0 -> Adware.Aureate : No action taken.
C:\_RESTORE\TEMP\MSIPCSV.0 -> Adware.Aureate : No action taken.
C:\WINDOWS\SYSTEM\cp.exe -> Adware.ComedyPlanet : No action taken.
C:\WINDOWS\Temporary Internet Files\Content.IE5\ORB3MWHL\c15[1].exe -> Adware.ComedyPlanet : No action taken.
C:\WINDOWS\SYSTEM\GoGo9CP.dll -> Adware.EZula : No action taken.
C:\Program Files\DivX\DivX Pro Codec\gain_trickler_3202.exe -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\CMEIIAPI.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\CMESys.exe -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\GAppMgr.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\GController.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\GDwldEng.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\GIocl.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\GIoclClient.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\GMTProxy.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\GObjs.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\GStore.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\GStoreServer.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\CMEII\Gtools.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\GMT\EGIEProcess.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\GMT\EGNSEngine.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\GMT\GMT.exe -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\GMT\GUninstaller.exe -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\GMT\GatorRes.dll -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\GMT\GatorStubSetup.exe -> Adware.Gator : No action taken.
C:\Program Files\Fichiers communs\GMT\egIEEngine.dll -> Adware.Gator : No action taken.
C:\WINDOWS\SYSTEM\gogotoolsSILAWO9pi.exe -> Adware.GogoTools : No action taken.
C:\WINDOWS\HLInstaller3.exe -> Adware.MDH : No action taken.
C:\WINDOWS\SYSTEM\HyperLinker3.exe -> Adware.MDH : No action taken.
C:\WINDOWS\Temporary Internet Files\Content.IE5\EPRWDKZI\HyperLinker3[1].cab/HyperLinker3.exe -> Adware.MDH : No action taken.
C:\WINDOWS\SYSTEM\lmf32v.dll -> Adware.Suggestor : No action taken.
F:\WINDOWS\system32\temp2.exe -> Backdoor.Small.lo : No action taken.
C:\WINDOWS\SYSTEM\MegasearchBarSetup.exe -> Downloader.Agent.a : No action taken.
C:\WINDOWS\SYSTEM\CP22.exe -> Downloader.Small.ahx : No action taken.
C:\WINDOWS\SYSTEM\TVM_B5B27.EXE -> Downloader.Small.wk : No action taken.
J:\[Software] Utilitaires\Bitcomet 0.68 Crack.rar/crack.exe -> Dropper.Agent.anl : No action taken.
C:\WINDOWS\SYSTEM\in10b6.dll -> Dropper.Small.abe : No action taken.
C:\host.exe -> Dropper.Small.apl : No action taken.
D:\host.exe -> Dropper.Small.apl : No action taken.
E:\host.exe -> Dropper.Small.apl : No action taken.
F:\WINDOWS\svchost.exe -> Dropper.Small.apl : No action taken.
F:\host.exe -> Dropper.Small.apl : No action taken.
G:\host.exe -> Dropper.Small.apl : No action taken.
H:\host.exe -> Dropper.Small.apl : No action taken.
J:\host.exe -> Dropper.Small.apl : No action taken.
C:\WINDOWS\SYSTEM\a.exe -> Logger.Briss.c : No action taken.
C:\WINDOWS\SYSTEM\bridge.dll -> Logger.Briss.c : No action taken.
C:\Program Files\WinRAR\Patcher.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : No action taken.
J:\[Software] Utilitaires\Stream Video Audio Capture Pack\StreamBox.zip/fr_svcr1b31_crack.zip/fr_svcr1b31_crack.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : No action taken.
J:\[Software] Utilitaires\Stream Video Audio Capture Pack\StreamBox.zip/fr_svcr1b31_crack/fr_svcr1b31_crack.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : No action taken.
:mozilla.116:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.117:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.118:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.229:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.51:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.52:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.53:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.54:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.55:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.56:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.57:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.726:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.727:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.728:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.729:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.129:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.139:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.187:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.188:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.189:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.351:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.361:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.370:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.535:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.536:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.537:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.538:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.715:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.716:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@2o7[1].txt -> TrackingCookie.2o7 : No action taken.
:mozilla.25:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.517:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.518:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.519:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.755:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.756:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.758:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.738:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Addcontrol : No action taken.
:mozilla.522:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.523:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.135:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Adserver : No action taken.
:mozilla.137:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Adserver : No action taken.
C:\WINDOWS\Cookies\anyuser@z1.adserver[1].txt -> TrackingCookie.Adserver : No action taken.
C:\WINDOWS\Cookies\anyuser@z1.adserver[3].txt -> TrackingCookie.Adserver : No action taken.
:mozilla.107:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.108:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.158:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.159:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.162:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.163:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.231:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.244:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
C:\WINDOWS\Cookies\anyuser@adtech[2].txt -> TrackingCookie.Adtech : No action taken.
:mozilla.116:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.117:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.118:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.119:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.120:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.121:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.144:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.145:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.146:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.147:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.150:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.151:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.152:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.153:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.154:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.155:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.156:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.157:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.158:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.434:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.436:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.437:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.438:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.439:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.440:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
C:\WINDOWS\Cookies\anyuser@advertising[2].txt -> TrackingCookie.Advertising : No action taken.
C:\WINDOWS\Cookies\anyuser@advertising[3].txt -> TrackingCookie.Advertising : No action taken.
C:\WINDOWS\Cookies\anyuser@servedby.advertising[1].txt -> TrackingCookie.Advertising : No action taken.
C:\WINDOWS\Cookies\anyuser@servedby.advertising[3].txt -> TrackingCookie.Advertising : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@advertising[1].txt -> TrackingCookie.Advertising : No action taken.
:mozilla.112:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.115:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.54:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.59:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
C:\WINDOWS\Cookies\anyuser@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.245:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Bfast : No action taken.
:mozilla.573:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Bfast : No action taken.
C:\WINDOWS\Cookies\anyuser@bfast[2].txt -> TrackingCookie.Bfast : No action taken.
:mozilla.12:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.148:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.181:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.73:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Bluestreak : No action taken.
C:\WINDOWS\Cookies\anyuser@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.
C:\WINDOWS\Cookies\anyuser@bluestreak[2].txt -> TrackingCookie.Bluestreak : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@bluestreak[2].txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.261:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.446:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.447:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.513:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.514:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
C:\WINDOWS\Cookies\anyuser@burstnet[2].txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.367:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.368:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.369:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.370:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.373:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.374:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.375:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.81:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.82:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.83:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.84:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.95:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.96:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.97:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
C:\WINDOWS\Cookies\anyuser@casalemedia[2].txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.767:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Casinotropez : No action taken.
:mozilla.263:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Clickbank : No action taken.
:mozilla.143:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Com : No action taken.
:mozilla.144:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Com : No action taken.
:mozilla.218:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Com : No action taken.
:mozilla.95:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Com : No action taken.
C:\WINDOWS\Cookies\anyuser@com[2].txt -> TrackingCookie.Com : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@com[1].txt -> TrackingCookie.Com : No action taken.
:mozilla.125:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.126:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.127:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.195:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.196:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.197:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.198:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.292:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.293:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Comclick : No action taken.
:mozilla.294:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Comclick : No action taken.
C:\WINDOWS\Cookies\anyuser@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : No action taken.
:mozilla.18:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.20:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.43:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.52:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Doubleclick : No action taken.
C:\WINDOWS\Cookies\anyuser@doubleclick[2].txt -> TrackingCookie.Doubleclick : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.135:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.128:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Estat : No action taken.
:mozilla.216:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Estat : No action taken.
:mozilla.36:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Estat : No action taken.
:mozilla.57:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Estat : No action taken.
C:\WINDOWS\Cookies\anyuser@estat[1].txt -> TrackingCookie.Estat : No action taken.
:mozilla.805:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.175:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.176:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.177:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.178:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.179:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.180:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.210:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.252:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.253:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.254:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.255:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.256:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.257:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.307:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.308:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.309:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.310:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.401:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
C:\WINDOWS\Cookies\anyuser@as-us.falkag[2].txt -> TrackingCookie.Falkag : No action taken.
C:\WINDOWS\Cookies\anyuser@as1.falkag[1].txt -> TrackingCookie.Falkag : No action taken.
C:\WINDOWS\Cookies\anyuser@as1.falkag[2].txt -> TrackingCookie.Falkag : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@as1.falkag[1].txt -> TrackingCookie.Falkag : No action taken.
:mozilla.136:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.138:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.19:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.215:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.216:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.83:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.84:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.85:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.86:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Fastclick : No action taken.
C:\WINDOWS\Cookies\anyuser@fastclick[1].txt -> TrackingCookie.Fastclick : No action taken.
C:\WINDOWS\Cookies\anyuser@fastclick[3].txt -> TrackingCookie.Fastclick : No action taken.
C:\WINDOWS\Cookies\anyuser@gator[1].txt -> TrackingCookie.Gator : No action taken.
C:\WINDOWS\Cookies\anyuser@gator[2].txt -> TrackingCookie.Gator : No action taken.
C:\WINDOWS\Cookies\anyuser@webpdp.gator[2].txt -> TrackingCookie.Gator : No action taken.
:mozilla.206:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Goclick : No action taken.
C:\WINDOWS\Cookies\anyuser@goclick[1].txt -> TrackingCookie.Goclick : No action taken.
:mozilla.218:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.212:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.213:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.214:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.608:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.609:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.646:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.726:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.727:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.728:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.729:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.835:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.930:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
C:\WINDOWS\Cookies\anyuser@ehg-dig.hitbox[1].txt -> TrackingCookie.Hitbox : No action taken.
C:\WINDOWS\Cookies\anyuser@hitbox[1].txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.130:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Hitslink : No action taken.
:mozilla.131:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Hitslink : No action taken.
:mozilla.132:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Hitslink : No action taken.
:mozilla.133:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Hitslink : No action taken.
:mozilla.125:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Hotlog : No action taken.
:mozilla.660:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Hotlog : No action taken.
:mozilla.90:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Hotlog : No action taken.
C:\WINDOWS\Cookies\anyuser@hotlog[1].txt -> TrackingCookie.Hotlog : No action taken.
:mozilla.572:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Ivwbox : No action taken.
C:\WINDOWS\Cookies\anyuser@ivwbox[2].txt -> TrackingCookie.Ivwbox : No action taken.
:mozilla.301:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.302:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.31:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.32:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.57:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Mediaplex : No action taken.
C:\WINDOWS\Cookies\anyuser@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.561:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.562:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.563:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.101:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.140:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Overture : No action taken.
:mozilla.141:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Overture : No action taken.
:mozilla.877:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Overture : No action taken.
C:\WINDOWS\Cookies\anyuser@www10.paypopup[1].txt -> TrackingCookie.Paypopup : No action taken.
C:\WINDOWS\Cookies\anyuser@www2.paypopup[1].txt -> TrackingCookie.Paypopup : No action taken.
C:\WINDOWS\Cookies\anyuser@www4.paypopup[2].txt -> TrackingCookie.Paypopup : No action taken.
C:\WINDOWS\Cookies\anyuser@www6.paypopup[1].txt -> TrackingCookie.Paypopup : No action taken.
C:\WINDOWS\Cookies\anyuser@www7.paypopup[1].txt -> TrackingCookie.Paypopup : No action taken.
:mozilla.222:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.223:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.224:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.225:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.731:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.732:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.733:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.734:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
C:\WINDOWS\Cookies\anyuser@ads.pointroll[2].txt -> TrackingCookie.Pointroll : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@ads.pointroll[2].txt -> TrackingCookie.Pointroll : No action taken.
C:\WINDOWS\Cookies\anyuser@ppms.popularix[1].txt -> TrackingCookie.Popularix : No action taken.
:mozilla.252:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.254:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.357:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.358:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.50:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.51:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.667:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.668:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
C:\WINDOWS\Cookies\anyuser@questionmarket[1].txt -> TrackingCookie.Questionmarket : No action taken.
C:\WINDOWS\Cookies\anyuser@ads.realcastmedia[1].txt -> TrackingCookie.Realcastmedia : No action taken.
C:\WINDOWS\Cookies\anyuser@www.realcastmedia[2].txt -> TrackingCookie.Realcastmedia : No action taken.
:mozilla.250:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.482:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.533:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Revenue : No action taken.
C:\WINDOWS\Cookies\anyuser@revenue[2].txt -> TrackingCookie.Revenue : No action taken.
C:\WINDOWS\Cookies\anyuser@revenue[3].txt -> TrackingCookie.Revenue : No action taken.
C:\WINDOWS\Cookies\anyuser@edge.ru4[2].txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.331:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.332:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.333:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.334:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.335:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.336:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.380:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.381:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.382:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.383:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.43:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.44:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.45:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.46:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
C:\WINDOWS\Cookies\anyuser@serving-sys[1].txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.122:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.123:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.405:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.507:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.508:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.531:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.532:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.938:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.10:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.11:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.11:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.12:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.13:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.15:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.16:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.17:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.6:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.74:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.75:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.76:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Smartadserver : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.160:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Spylog : No action taken.
C:\WINDOWS\Cookies\anyuser@spylog[1].txt -> TrackingCookie.Spylog : No action taken.
:mozilla.129:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.33:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.34:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.36:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.37:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.38:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.39:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.40:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.41:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.42:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.43:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.44:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.45:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.46:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.47:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.48:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.49:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.592:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.593:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.594:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.595:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.596:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.597:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.598:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.599:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.600:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.601:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.602:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.603:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.604:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.605:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.606:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.607:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.608:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.609:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.610:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.611:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.612:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.613:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.614:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.615:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.616:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.617:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.618:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
C:\WINDOWS\Cookies\anyuser@statcounter[1].txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.451:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.452:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.803:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.804:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.168:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Targetnet : No action taken.
:mozilla.417:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Targetnet : No action taken.
C:\WINDOWS\Cookies\anyuser@targetnet[1].txt -> TrackingCookie.Targetnet : No action taken.
F:\Documents and Settings\Mahmoud\Cookies\mahmoud@targetnet[1].txt -> TrackingCookie.Targetnet : No action taken.
C:\WINDOWS\Cookies\anyuser@tfag[2].txt -> TrackingCookie.Tfag : No action taken.
C:\WINDOWS\Cookies\anyuser@tracking.thunderdownloads[2].txt -> TrackingCookie.Thunderdownloads : No action taken.
:mozilla.226:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.227:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.228:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.229:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.230:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.231:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.232:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.233:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.234:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.235:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-2.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.245:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.246:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.247:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.248:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.249:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.28:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.29:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.30:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.31:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Profiles\default\bed1lvac.slt\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.58:F:\Documents and Settings\Mahmoud\Application Data\Mozilla\Firefox\Profiles\aj2k1d5a.default\cookies-1.txt -> TrackingCookie.Tradedoubler : No action taken.
C:\WINDOWS\Cookies

Stahn · Answer

Alors, est-ce que je peux dire qu je m'en suis débarassé de ce Virus ??

Séb08 · Answer

Tu as lu ce que j'ai indiqué en gras au post <1> ????

refais le scan Ewido car tu n'as rien supprimé du tout .

Le no action taken que tu peux voir signifie que tu n'as rien viré ...

Donc a refaire et supprime (delete) tout ce qu'il te trouve et colle le rapport.

a+

dii2ma · Answer

Logfile of HijackThis v1.99.1
Scan saved at 15:12:23, on 17/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe
C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
C:\PROGRA~1\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\uTorrent\utorrent.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
D:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F3 - REG:win.ini: load=C:\WINDOWS\svchost.exe
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (VC0305)
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Global Startup: DSLMON.lnk = ?
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{FBC24D7C-76FA-4002-A828-537565F23B17}: NameServer = 193.251.169.165 80.88.0.131
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSN Messenger\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ADSLAutoconnect - Unknown owner - C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe" -z (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe

voila j'ai suivi toute les etape mais j'ai toujours le probleme

abdou · Answer

Logfile of HijackThis v1.99.1
Scan saved at 17:10:40, on 17/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\vsnpstd.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\BearShare\BearShare.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\program files\Caffe\Server.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\JetAudio\jetAudio.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Nouveau dossier\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Caffe-Server] c:\program files\Caffe\Server.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\Office10\EXCEL.EXE/3000
O17 - HKLM\System\CCS\Services\Tcpip\..\{541E9397-5733-4841-B5D2-768DCC536D33}: NameServer = 212.217.0.1,212.217.0.12
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSN Messenger\msgrapp.dll" (file missing)
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

mohamed zaki · Answer

c'est simple 
il vous suffit de suprimer autorun celui de copy.exe 
apres avoire afficher les dossier cacher 
et refait cet operation pour chaque partition de votre ordi memme pour le flash,mp3,....

ilyas · Answer

slt tout le monde j ai la meme chose voila 

 proLogfile of HijackThis v1.99.1
Scan saved at 11:24:08, on 12/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Fichiers communs\{107DEE91-02DA-1036-0921-000323200021}\Update.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Menara\dslmon.exe
C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
D:\iTunes\iTunesHelper.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Google\Web Accelerator\googlewebaccclient.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.menara.ma/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Menara
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://localhost:9100/proxy.pac
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\KesenjanganSosial.exe"
F3 - REG:win.ini: load=C:\WINDOWS\svchost.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL (file missing)
O2 - BHO: Google Web Accelerator Helper - {69A87B7D-DE56-4136-9655-716BA50C19C7} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Google Web Accelerator - {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [SunJavaUpdateScheduler] C:\WINDOWS\system32\EmpiresLegacy25.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [outlook] C:\Program Files\outlook\outlook.exe /auto
O4 - HKLM\..\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\Run: [fzg] C:\Program Files\Config\svhost32.exe
O4 - HKLM\..\Run: [Bron-Spizaetus] "C:\WINDOWS\ShellNew\RakyatKelaparan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "D:\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\RunServices: [winlog] winlog.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Tok-Cirrhatus-6117] "C:\Documents and Settings\ilyas.SILYAS.000\Local Settings\Application Data\br13257on.exe"
O4 - Global Startup: BlueSoleil.lnk = ?
O4 - Global Startup: DSLMON.lnk = C:\Program Files\Menara\dslmon.exe
O4 - Global Startup: Run Google Web Accelerator.lnk = C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://www.msn.com/fr-fr/
O16 - DPF: {701DC9DC-ACD5-4E94-85E3-F3F1ED68611A} (CWebClientCtl Object) - http://download.paltalk.com/webclient_production/webclientctl.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{17A02D55-AA7E-4276-A7DB-973B2028A03C}: NameServer = 212.217.0.14 212.217.1.14
O17 - HKLM\System\CS1\Services\Tcpip\..\{17A02D55-AA7E-4276-A7DB-973B2028A03C}: NameServer = 212.217.0.14 212.217.1.14
O17 - HKLM\System\CS2\Services\Tcpip\..\{17A02D55-AA7E-4276-A7DB-973B2028A03C}: NameServer = 212.217.0.14 212.217.1.14
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

mannou · Answer

bonjour
j'ai besoin d'aide a propos du verus autorun 
j'ai scanner mon disque par l'avast! mais il n'a pas resolu mon probleme 
est ce que je dois le faire avec un killer et le quel?

benattou · Answer

HKLM\SOFTWARE\Microsoft\UPnP Device Host\Description\{EE486806-F1CF-43BA-990D-C17E84007916} -> Adware.CoolWebSearch : Cleaned.
C:\Program Files\Safety Bar -> Adware.Generic : Cleaned.
HKLM\SOFTWARE\Classes\CLSID\{5d4831e0-5a7c-4a46-afd5-a79ab8ce36c2} -> Adware.Generic : Cleaned.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5d4831e0-5a7c-4a46-afd5-a79ab8ce36c2} -> Adware.Generic : Cleaned.
HKU\S-1-5-21-1606980848-842925246-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A1DDC19-5893-43AB-A73F-F41A0F34D115} -> Adware.Generic : Cleaned.
HKU\S-1-5-21-1606980848-842925246-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5D4831E0-5A7C-4A46-AFD5-A79AB8CE36C2} -> Adware.Generic : Cleaned.
HKU\S-1-5-21-1606980848-842925246-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C3703265-4671-4858-92A4-CBA6A7B3BB45} -> Adware.Generic : Cleaned.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Public Messenger ver 2.03 -> Adware.IntCodec : Cleaned.
:mozilla.20:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.22:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.23:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.24:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.128:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.139:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.140:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.48:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.49:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.50:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.21:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.55:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.69:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.51:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.142:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.47:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.105:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.106:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.107:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.108:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.109:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.110:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.14:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.15:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.16:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.141:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.12:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.13:C:\Documents and Settings\jihane\Application Data\Mozilla\Firefox\Profiles\un1zmu0z.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.


::Report end

zmba · Answer

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	21:06:40 02/02/2007

 + Résultat de l'analyse:	



C:\Documents and Settings\Compaq_Propriétaire\Bureau\zmba\Nouveau dossier\Alcatel_VLE5_without_test_Point.zip/Alcatel_VLE5_without_test_Point/Alcatel VLE Unlock.exe -> Backdoor.SdBot.xd : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\Compaq_Propriétaire\Bureau\zmba\Nouveau dossier\Alcatel_VLE5_without_test_Point\Alcatel_VLE5_without_test_Point\Alcatel VLE Unlock.exe -> Backdoor.SdBot.xd : Nettoyé et sauvegardé (mise en quarantaine).
D:\INCOMING\Kaspersky Antivirus 2006 + key\Kaspersky.Antivirus.Personal.5.0.372.(español).-.rar/Kaspersky Antivirus Personal 5.0.372 (espa¤ol)\Keys\key???@ttdown.com.exe -> Dropper.Agent.xk : Nettoyé et sauvegardé (mise en quarantaine).
:mozilla.21:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.24:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.25:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.115:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.92:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.93:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.94:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.95:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.96:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.80:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.81:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.82:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.77:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.78:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.26:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.66:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.39:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.40:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.41:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.42:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.43:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.44:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@casalemedia[1].txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.20:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.119:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.83:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.84:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.85:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.86:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.75:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.131:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.116:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.117:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.91:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.55:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.56:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.57:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.126:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.45:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.46:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c8cukkq0.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP117\A0033444.exe -> Trojan.Copyself : Nettoyé et sauvegardé (mise en quarantaine).


Fin du rapport

zmba · Answer

Logfile of HijackThis v1.99.1
Scan saved at 21:15:13, on 02/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\PROGRA~1\MI3AA1~1\wcescomm.exe
C:\Program Files\HP\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe
C:\PROGRA~1\MI3AA1~1apimgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\HP\Digital Imaging\Bin\hpoSTS08.exe
C:\HP\KBD\KBD.EXE
c:\windows\system\hpsysdrv.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\explorer.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\pcsync2.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Nokia\Nokia PC Suite 6\SeUpdateDb.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://fr.search.yahoo.com/?fr=cb-hp06
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://fr.search.yahoo.com/?fr=cb-hp06
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Steam] C:\Program Files\Steam\Steam.exe -silent
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\wcescomm.exe"
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\RunOnce: [Delete temporary setup file] cmd /Q /D /C del "C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\{0C8FF1E8-3948-4696-8260-A9B609D4C8C9}\{6536688C-24C5-4023-B404-BEE850ED4312}\setup.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\HP\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\RT2500 Wireless LAN Card\Installer\WINXP\RaConfig2500.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6ABE4BC3-7253-418E-85E8-F334A73154D3} (CSmartClient Object) - http://www.smart-clip.com/activex/SmartClip.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

alsalafy · Answer

Virus] Win32.Perlovga.A (Copy.exe, Autorun

azn · Answer

Logfile of HijackThis v1.99.1
Scan saved at 19:11:37, on 09/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\spoolsv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\Xfire\xfire.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINNT\System32
vsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINNT\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Alain\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F3 - REG:win.ini: load=C:\WINNT\svchost.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0CAC2122-C610-A93F-3486-356C466A8F10} - C:\DOCUME~1\Alain\APPLIC~1\ACTIVE~1\Play Internet.exe (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Globalfreelocksdefy] C:\Documents and Settings\All Users\Application Data\LOUD INTER GLOBAL FREE\hold license.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINNT\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Error Window] C:\DOCUME~1\Alain\APPLIC~1\BLUETR~1\safe mess mags.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WlanUtility.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?14425dc254b64202bd6bce188f29e275
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?14425dc254b64202bd6bce188f29e275
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINNT\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: WinFast(R) Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32
vsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

Inquisitours · Answer

Voilà une technique assez simple : 

- afficher les fichiers cachés et décocher l'onglet " masquer les fichiers protégés du système d'exploitation " dans Outils -> option des dossiers
- télécharger process explorer : lien via Google
- lancer process explorer 
- terminer (kill) les applications temp1.exe et temp2.exe
- supprimer à la racine de chaque disque dur les fichiers autorun.inf copy.exe et host.exe en ouvrant les disques via la commande clic droit -> ouvrir PAS DE DOUBLE-CLIC sur le disque :  le fichier autorun.inf commande à Windows d'ouvrir le fichier copy.exe infecté en exécution automatique.

attention, si vous avez branché un disque dur externe ou une mémoire flash (clé USB, carte SD...) pendant que vous étiez infecté, le virus se trouve aussi sur celle-ci! checkez bien tous vos supports amovibles en même temps!

zaki the king · Answer

slt
telecharger kaspersky internet security et activer la version d'evaluation de 30jours 
puis il faut faire un scan complet de l'ordinateur  et soyer sure que kaspersky a supprimé les viruses redemarer votre micro 
aller sur poste de travail outil..options des dossiers ...afficher les dossier cache ...et decocher masquer les fichier protegés du systeme d'exploitation..ok 
et faire ceci 
aller sur chaque partition disque et supprimer autorun ..redemarer l'ordinateur c fini 
:) enjoy 
et poste moi votre reponse

zaki the king · Answer

ok aa aliouat 
les partition de disque sont les lecteurs de disque c,d..flash mp3
clic bouton droit -->ouvrire -->et supprimmer apres avoir afficher les dossiers caches et les dossiers proteges par le systeme d'exploitation et n'oublie pas de redemarrer 
et repond moi 
w dima hot fi belek **sel lemjareb w matselech tbib**

zaki the king · Answer

felicitations aliouat
ah oui il faut recocher la case et ne pas afficher les dossiers caches
et je vous conseil d'utiliser kaspersky et il faut installer un anti spywere et activer le parfeu
et si vous avez aucun probleme je suis la contact moi sur mon e-mail zakimohamed2589@yahoo.fr ou sur skype mohamedzaki7
bye bye **sel lemjareb w ma tselech etbibe**
:-) good bye

elannab · Answer

problème du virus copy.exe .comment l'éliminer svp

Omar EL HADDAD · Answer

Identité : La plus parts l’apelle par « Perlovga ». Mais il se presente en 3 forme de virus.
•	Perlovga.A,Trojan (CA eTrust) 
•	TROJ_PERLOVGA.A (Trend Micro) 
•	Virus.Win32.Perlovga.a (Kaspersky) 
•	W32/Perlovga.A (Fortinet) 
Caracteristiques :
temp1.exe,  temp2.exe,xcopy.exe , auotrun.inf , svchost.exe  
temp2.exe ouvre le port (8888) et se connecte en adresse  211.69.242.91 
les autres fichiers ont le même principe donc.
Ce virus a besoin de l’intervention de l’utilisateur pour se propager. Cliquer sue une réponse sur une icône. Il se propage dans la plus part des temps par les clé usb et disque externes. 
La plus part des utilisateurs qui utilisent P2P clients, IRC, email ou autres media de partages de fichiers sont automatiquement attaqués. les utilisateurs qui utilisent des logiciels tel que « U-Torrents », « B-torrents » et autres il y’en a plusieurs,. Ces utilisateurs sont cuit automatiquement. Et tout les logiciels telechagés depuis ces cites sont infectés. 
Si vous penser gagner des logiciels gratuit même des anti-virus vous etes trompés. Il n y’a pas de gratuit Mr. Chaque chose à son prix. Le prix du gratuit est bien un virus.

Solution :
Je pense que si tu as une licence de votre Windows aussi bien pour tout vos produit Microsoft et autres et si tu cherche pas les logiciels gratuits professionnel ou porno. Je crois pas que tu sera tombé dans ces virus.
 Il y’a des logiciels qui prétendent attaquer ce genre de virus. 

https://www.securitystronghold.com/solutions/copy.exe-spyware-remover-cannot-open-drive.html

Mais crois moi n'attend pas de la gratuité des iracles seules des virus.  

Le laboratoire Kasperskay, le laboratoire Norton et autres ne travaillent pas en gratuité. mais quans tu les demande des produits gratuit, ils trouve un essaie pour leur nouveau virus.
Merci

lio · Answer

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 21:55:52, on 03/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\No-IP\DUC20.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Documents and Settings	ango\Mes documents\Downloads\Programs\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: No-IP DUC.lnk = C:\Program Files\No-IP\DUC20.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcappcapd.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

zaki the king · Answer

slt  lio 

d'apres votre log hijackthis vous ete encore infecté

pour supprimer le virus completement vous devez:

1-aller sur poste de travail
2-en haut tu choisis le menu outils--->options des dossiers ----->affichage----->selectione afficher les dossier cachés  et decocher la case masquer les fichiers proteges par le systeme d'exploitation 

3-ouvrer le c et supprime le fichier autorun
et repeter cette action pour le d,e,flash,ipod,mp3....

4-redemarrer le systeme  

enjoy ;)

lilo · Answer

Bonjou, 

j'ai l'anti-virus Kaperski, et ca ne m'a pas empêché d'avoir deux virus : 
win32perlovga et le cheval de troie
a+ et merci pour votre réponse
lilo

simo · Answer

ouvre la fenetre dos et cmd les code suivants et redemare ton pc  a+

@echo off
cd\
taskkill /f /im temp1.exe
taskkill /f /im temp2.exe

del /a/f/q %systemroot%\system32	emp?.exe %systemroot%\svchost.exe %systemroot%\xcopy.exe %systemroot%\autorun.inf >nul 2>&1

del /a/f/q c:\autorun.inf c:\copy.exe c:\host.exe >nul 2>&1

del /a/f/q d:\autorun.inf d:\copy.exe d:\host.exe >nul 2>&1

del /a/f/q e:\autorun.inf e:\copy.exe e:\host.exe >nul 2>&1

del /a/f/q f:\autorun.inf f:\copy.exe f:\host.exe >nul 2>&1

del /a/f/q g:\autorun.inf g:\copy.exe g:\host.exe >nul 2>&1

del /a/f/q h:\autorun.inf h:\copy.exe h:\host.exe >nul 2>&1

del /a/f/q i:\autorun.inf i:\copy.exe i:\host.exe >nul 2>&1

del /a/f/q j:\autorun.inf j:\copy.exe j:\host.exe >nul 2>&1

del /a/f/q k:\autorun.inf k:\copy.exe k:\host.exe >nul 2>&1

del /a/f/q l:\autorun.inf l:\copy.exe l:\host.exe >nul 2>&1

del /a/f/q m:\autorun.inf m:\copy.exe m:\host.exe >nul 2>&1

del /a/f/q n:\autorun.inf n:\copy.exe n:\host.exe >nul 2>&1

EXIT

missyapo77 · Answer

Bonjour, 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:57:28, on 10/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jucheck.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PCDrProfiler] "C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe" -r
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Norton Internet Security\cfgwiz.exe /GUID {F073BDC9-0D67-4ff0-879E-27241C843828} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [SSC_UserPrompt] "c:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe"
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunOnce: [regcmdcons] c:\windowsegedit.exe /s c:\hp\bin\cmdcons2.reg
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin
pjpi150_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin
pjpi150_05.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

joshua · Answer

Bonjour, 
utilise fixperl pour fixer  ces prob.

http://blog.abuse.ma/fixerl.exe

humig · Answer

ce lien ne marche pas 

c fixperl et non fixerl

http://blog.abuse.ma/fixperl.exe

amine9448 · Answer

salut
comme tu la indiké zaki
il fo cherché le fichier autorun pui le suprimé le problem c ke g trouvé plusieur fichier autorun sur mn disk C 
kelk1 je les reconai dial mes aplication cependant je doute ke sa soi d fichier  AUTORUN.exe-055703AF.pf
 mé avan de suprimé je voulai avoir vos avis Merci

aurelman · Answer

Bien le bonjour à tous

j'ai le même problème avec le trajan, win. 32, perlovga...etc; Mon problème étant que je ne peux même plus accéder à mon poste de travail. Ca à correspondu avec le moment ou j'ai installé kaspersky... Y'aurai-t-il un moyen de régler ça?...

zaki the king · Answer

salut   aurelman,
essay de supprimer autorun.inf sous dos !!
demarrer---tous les pgm---accessoires----invite de commandes :
et taper :
cd\  -----  dir/ah ---- del autorun.inf (sinon autorun.ini)
redemarre et rend moi la rep 

@+

Pix · Answer

Bonjour, 
Mon ordi ne veut meme plus demarrer (Portable VAIO)
Le virus copy.exe recupéré par une clef usb, a fait redemarrer l'ordi et maintenant le mess suivant s'affiche:
"NTLDR Manque
 Entrz CTRL+ALT+SUPP pour redemarrer"
Et le cycle se repete a chaque demarrage...
???
Merci

malin · Answer

Bonjour scott, j'ai le meme problème de virus win32.perglovga, franchement il fé chier. Si je supprime ma session et recréer une autre, vais-je accéder encore à mes dossier et fichier sauvés sous la session supprimée? ou je perds tout!!

Merci

chub · Answer

bonjour tout le monde.

voila j'ai temp2.exe qui apparait a chaque fois que j'allume mon ordi, et d'apres ce que j'ai pu en lire, il est keylogger.

donc il est recommandé de ne faire aucune transaction par cb sur le net, hors, je sais pas exactement depuis combien de temps j'ai ce trojan,  mais je voudrai savoir si je peux controler qu'il ne me sera pas nocif avec des utilisations frauduleuse de mes données banquaires, car recement j'ai acheté un pc complet que j'ai justement reglé par carte banquaire en ligne.

donc il y aurai-t-il un moyen de pouvoir recuperer ou sont stockés ces infos et si je peux remonter a l'endroit ou elles sont envoyés.
si je peux controler simplement sur le net mes relevé banquaires etc..

merci

Y-seen · Answer

voila le 1er rapport 

--------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	16:43:35 01/04/2008

 + Résultat de l'analyse:	



C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP34\A0001985.exe -> Backdoor.Small.lo : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP34\A0002007.exe -> Backdoor.Small.lo : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP35\A0002038.exe -> Backdoor.Small.lo : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP35\A0003038.exe -> Backdoor.Small.lo : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP35\A0004038.exe -> Backdoor.Small.lo : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP36\A0004057.exe -> Backdoor.Small.lo : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP36\A0004058.exe -> Dropper.Small.apl : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP36\A0004059.exe -> Dropper.Small.apl : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP36\A0004061.exe -> Dropper.Small.apl : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP36\A0004063.exe -> Dropper.Small.apl : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@ehg-ittoolbox.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyé.
C:\Documents and Settings\Ya$$ine\Cookies\ya$$ine@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP34\A0001984.exe -> Trojan.Copier : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP34\A0002006.exe -> Trojan.Copier : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP35\A0003037.exe -> Trojan.Copier : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP35\A0004037.exe -> Trojan.Copier : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP36\A0004056.exe -> Trojan.Copier : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP36\A0004060.exe -> Trojan.Copyself : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP36\A0004062.exe -> Trojan.Copyself : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP36\A0004064.exe -> Trojan.Copyself : Nettoyé.
C:\System Volume Information\_restore{B0446FCF-9D59-46A9-ABCF-C14C474114C1}\RP36\A0004065.exe -> Trojan.Copyself : Nettoyé.


Fin du rapport

et voila le rapport de HijackThis :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:45:41, on 01/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mediafour\MacDrive 7\MacDriveService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mediafour\MacDrive 7\MacDrive.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F3 - REG:win.ini: load=C:\WINDOWS\svchost.exe
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [{B179023B-6238-4499-8F26-CD73E9D90E0A}] "C:\Program Files\Mediafour\MacDrive 7\MacDrive.exe"
O4 - HKLM\..\Run: [MDGetStarted.exe] "C:\Program Files\Mediafour\MacDrive 7\MDGetStarted.exe" /auto
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Avid SDM Service (AvidSDMService) - Unknown owner - C:\WINDOWS\system32\AvidSDMService.exe (file missing)
O23 - Service: Avid Startup (AvidStartup) - Unknown owner - C:\WINDOWS\system32\AvidStartup.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MacDriveService - Mediafour Corporation - C:\Program Files\Mediafour\MacDrive 7\MacDriveService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

[Virus] Win32.Perlovga.A (Copy.exe, Autorun)

34 réponses

Discussions similaires

Newsletters