Virus serwab et win
Résolu/Fermé
virgule41
Messages postés
23
Date d'inscription
mardi 6 mars 2007
Statut
Membre
Dernière intervention
28 mars 2007
-
6 mars 2007 à 13:44
virgule41 Messages postés 23 Date d'inscription mardi 6 mars 2007 Statut Membre Dernière intervention 28 mars 2007 - 14 mars 2007 à 21:01
virgule41 Messages postés 23 Date d'inscription mardi 6 mars 2007 Statut Membre Dernière intervention 28 mars 2007 - 14 mars 2007 à 21:01
A voir également:
- Virus serwab et win
- Win setup from usb - Télécharger - Utilitaires
- Telecharger win rar - Télécharger - Compression & Décompression
- Youtu.be virus - Accueil - Guide virus
- Svchost.exe virus - Guide
- Win dir stat - Télécharger - Gestion de fichiers
2 réponses
Xzr
Messages postés
41
Date d'inscription
jeudi 15 février 2007
Statut
Membre
Dernière intervention
10 novembre 2007
6 mars 2007 à 14:23
6 mars 2007 à 14:23
Salut,
MessengerSkinner est en réalité un malware, vire-le
ouvre le répertoire program files/messenger skinner et double clique sur l’icône uninstall barrée d’une croix rouge et après redémarrage de l’ordinateur, la grosse **** de messenger skinner aura disparu.
ensuite fais ceci :
virus methode preliminaire de desinfection version fr
A+
MessengerSkinner est en réalité un malware, vire-le
ouvre le répertoire program files/messenger skinner et double clique sur l’icône uninstall barrée d’une croix rouge et après redémarrage de l’ordinateur, la grosse **** de messenger skinner aura disparu.
ensuite fais ceci :
virus methode preliminaire de desinfection version fr
A+
virgule41
Messages postés
23
Date d'inscription
mardi 6 mars 2007
Statut
Membre
Dernière intervention
28 mars 2007
14 mars 2007 à 21:01
14 mars 2007 à 21:01
VG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 15:05:09 09/03/2007
+ Résultat de l'analyse:
:mozilla.10:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.8:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.279:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.401:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.416:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.455:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.45:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.46:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.47:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.48:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.49:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.50:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.51:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.173:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.174:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.147:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.283:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.148:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.71:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.72:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.73:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.75:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.76:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.77:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.262:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
:mozilla.200:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.201:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.202:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.203:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.204:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.205:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.206:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.207:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.195:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.196:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.197:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.198:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.280:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.281:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.171:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.315:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.316:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.317:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.318:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.358:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Ru4 : Aucune action entreprise.
:mozilla.13:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.14:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.15:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.16:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.17:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.18:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.371:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.151:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.152:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.153:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.154:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.155:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.130:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.131:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.132:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.133:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.143:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.144:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.145:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.146:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.261:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
:mozilla.208:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.209:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.210:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.212:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.213:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
Fin du rapport
BitDefender Online Scanner
Results
Identified Viruses
1
Infected Files
1
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
1
Engines Info
Virus Definitions
403829
Engine build
AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)
Scan plugins
14
Archive plugins
38
Unpack plugins
6
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Infected with: Backdoor.Skinymes.Agent.A
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Disinfection failed
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Deleted
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)
Update failed
Et enfin le dernier rapport
Logfile of HijackThis v1.99.1
Scan saved at 20:12:41, on 09/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0C2.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\MI3AA1~1\wcescomm.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\PROGRA~1\Magentic\bin\MgApp.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Propriétaire\Bureau\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Netcom] "C:\Program Files\Netcom\Netcom.exe"
O4 - HKLM\..\Run: [TaskMon] C:\WINDOWS\System32\taskmon.exe
O4 - HKLM\..\Run: [EPSON Stylus C64 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0C2.EXE /P23 "EPSON Stylus C64 Series" /O6 "USB001" /M "Stylus C64"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\wcescomm.exe"
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.tele2internet.fr
O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://wisup.net/_plateforme/Upload/Aurigma/AurigmaActiveX/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://go.securelive.com/speed/WebInstall.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://register3.valueactive.com/574/webolr/OCX/FlashAX.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
Merci pour vos réponses
---------------------------------------------------------
+ Créé à: 15:05:09 09/03/2007
+ Résultat de l'analyse:
:mozilla.10:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.8:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.279:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.401:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.416:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.455:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.45:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.46:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.47:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.48:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.49:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.50:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.51:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.173:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.174:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.147:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.283:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.148:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.71:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.72:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.73:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.75:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.76:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.77:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.262:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
:mozilla.200:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.201:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.202:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.203:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.204:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.205:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.206:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.207:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.195:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.196:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.197:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.198:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.280:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.281:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.171:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.315:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.316:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.317:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.318:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.358:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Ru4 : Aucune action entreprise.
:mozilla.13:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.14:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.15:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.16:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.17:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.18:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.371:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.151:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.152:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.153:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.154:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.155:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.130:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.131:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.132:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.133:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.143:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.144:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.145:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.146:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.261:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
:mozilla.208:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.209:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.210:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.212:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.213:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
Fin du rapport
BitDefender Online Scanner
Results
Identified Viruses
1
Infected Files
1
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
1
Engines Info
Virus Definitions
403829
Engine build
AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)
Scan plugins
14
Archive plugins
38
Unpack plugins
6
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Infected with: Backdoor.Skinymes.Agent.A
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Disinfection failed
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Deleted
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)
Update failed
Et enfin le dernier rapport
Logfile of HijackThis v1.99.1
Scan saved at 20:12:41, on 09/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0C2.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\MI3AA1~1\wcescomm.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\PROGRA~1\Magentic\bin\MgApp.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Propriétaire\Bureau\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Netcom] "C:\Program Files\Netcom\Netcom.exe"
O4 - HKLM\..\Run: [TaskMon] C:\WINDOWS\System32\taskmon.exe
O4 - HKLM\..\Run: [EPSON Stylus C64 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0C2.EXE /P23 "EPSON Stylus C64 Series" /O6 "USB001" /M "Stylus C64"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\wcescomm.exe"
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.tele2internet.fr
O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://wisup.net/_plateforme/Upload/Aurigma/AurigmaActiveX/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://go.securelive.com/speed/WebInstall.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://register3.valueactive.com/574/webolr/OCX/FlashAX.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
Merci pour vos réponses
9 mars 2007 à 20:19
J'ai désinstaller messenger skinner à partir de la commande : Ajout / Suppression de progamme.
Ci-après je te mets mes rapports des scans :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 15:05:09 09/03/2007
+ Résultat de l'analyse:
:mozilla.10:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.8:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.279:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.401:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.416:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.455:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.45:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.46:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.47:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.48:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.49:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.50:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.51:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.173:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.174:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.147:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.283:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.148:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.71:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.72:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.73:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.75:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.76:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.77:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.262:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
:mozilla.200:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.201:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.202:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.203:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.204:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.205:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.206:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.207:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.195:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.196:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.197:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.198:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.280:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.281:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.171:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.315:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.316:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.317:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.318:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.358:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Ru4 : Aucune action entreprise.
:mozilla.13:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.14:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.15:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.16:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.17:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.18:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.371:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.151:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.152:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.153:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.154:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.155:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.130:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.131:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.132:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.133:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.143:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.144:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.145:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.146:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.261:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
:mozilla.208:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.209:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.210:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.212:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.213:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
Fin du rapport
BitDefender Online Scanner
Results
Identified Viruses
1
Infected Files
1
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
1
Engines Info
Virus Definitions
403829
Engine build
AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)
Scan plugins
14
Archive plugins
38
Unpack plugins
6
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Infected with: Backdoor.Skinymes.Agent.A
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Disinfection failed
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Deleted
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)
Update failed
Et enfin le dernier rapport
Logfile of HijackThis v1.99.1
Scan saved at 20:12:41, on 09/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0C2.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\MI3AA1~1\wcescomm.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\PROGRA~1\Magentic\bin\MgApp.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Propriétaire\Bureau\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Netcom] "C:\Program Files\Netcom\Netcom.exe"
O4 - HKLM\..\Run: [TaskMon] C:\WINDOWS\System32\taskmon.exe
O4 - HKLM\..\Run: [EPSON Stylus C64 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0C2.EXE /P23 "EPSON Stylus C64 Series" /O6 "USB001" /M "Stylus C64"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\wcescomm.exe"
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.tele2internet.fr
O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://wisup.net/_plateforme/Upload/Aurigma/AurigmaActiveX/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://go.securelive.com/speed/WebInstall.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://register3.valueactive.com/574/webolr/OCX/FlashAX.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
A+
13 mars 2007 à 21:23
J'ai désinstaller messenger skinner à partir de la commande : Ajout / Suppression de progamme.
Ci-après je te mets mes rapports des scans :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 15:05:09 09/03/2007
+ Résultat de l'analyse:
:mozilla.10:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.8:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.279:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.401:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.416:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.455:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.45:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.46:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.47:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.48:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.49:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.50:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.51:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.173:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.174:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.147:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.283:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.148:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.71:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.72:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.73:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.75:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.76:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.77:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.262:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
:mozilla.200:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.201:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.202:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.203:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.204:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.205:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.206:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.207:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.195:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.196:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.197:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.198:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.280:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.281:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.171:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.315:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.316:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.317:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.318:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.358:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Ru4 : Aucune action entreprise.
:mozilla.13:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.14:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.15:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.16:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.17:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.18:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.371:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.151:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.152:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.153:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.154:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.155:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.130:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.131:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.132:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.133:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.143:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.144:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.145:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.146:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.261:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
:mozilla.208:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.209:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.210:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.212:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.213:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\jukj5ing.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
Fin du rapport
BitDefender Online Scanner
Results
Identified Viruses
1
Infected Files
1
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
1
Engines Info
Virus Definitions
403829
Engine build
AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)
Scan plugins
14
Archive plugins
38
Unpack plugins
6
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Infected with: Backdoor.Skinymes.Agent.A
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Disinfection failed
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)=>lzma_solid_nsis0009
Deleted
C:\WINDOWS\Temp\install_msgskinner.exe=>(NSIS o)
Update failed
Et enfin le dernier rapport
Logfile of HijackThis v1.99.1
Scan saved at 20:12:41, on 09/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0C2.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\MI3AA1~1\wcescomm.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\PROGRA~1\Magentic\bin\MgApp.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Propriétaire\Bureau\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Netcom] "C:\Program Files\Netcom\Netcom.exe"
O4 - HKLM\..\Run: [TaskMon] C:\WINDOWS\System32\taskmon.exe
O4 - HKLM\..\Run: [EPSON Stylus C64 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0C2.EXE /P23 "EPSON Stylus C64 Series" /O6 "USB001" /M "Stylus C64"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\wcescomm.exe"
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.tele2internet.fr
O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://wisup.net/_plateforme/Upload/Aurigma/AurigmaActiveX/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://go.securelive.com/speed/WebInstall.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://register3.valueactive.com/574/webolr/OCX/FlashAX.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
A+