pub intempestives sur firefox et IE Résolu/Fermé

Question

depuis quelque temps j'ai des pub qui s'affiche sur internet explorer ete firefox principalement pour des anti-virus. J'ai essayer ccleaner, avg, ad-aware, rien n'y fait !
j'ai kaspersky.

j'ai fait un scan avec hijackthis voila le resultat:

Logfile of HijackThis v1.99.1
Scan saved at 20:21:42, on 17/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Program Files\QuickTime\qttask.exe
E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
E:\Program Files\BitComet\BitComet.exe
E:\Program Files\eMule\emule.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Parents\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB001" /M "Stylus D68"
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVP] "E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS\system32\gixqtnqt.dll",setvm
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [BitComet] "E:\Program Files\BitComet\BitComet.exe"
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKCU\..\Run: [eMuleAutoStart] E:\Program Files\eMule\emule.exe -AutoStart
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Documents and Settings\Sarah\Mes documents\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Documents and Settings\Sarah\Mes documents\MediaManager\grab.html
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Réglage rapide de Outpost Firewall Pro - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by15fd.bay15.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - 
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - 
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - 
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - 
O16 - DPF: {D28C3640-A6D7-4668-A53C-07A9CF67D157} (CFnacComposantCtrl Object) - https://www.fnacmusic.com/telechargementFnacmusic/FnacComposant.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

philae83 · Answer

Bonsoir, * Télécharge Blacklight https://europe.f-secure.com/exclude/blacklight/index.shtml (de F-Secure) (le premier de la page) Enregistre le sur ton Bureau. Double-clique blbeta.exe Clique sur "I ACCEPT" . clique Scan puis Next<*gras> Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres). Copie et colle le contenu de ce rapport dans ta prochaine réponse. NE PAS choisir l'option "Rename" de suite : nous devons analyser le rapport, car des fichiers légitimes peuvent être présents, tel wbemtest.exe

^^Marie^^ · Answer

'soir salimel

Prends connaissance du contenu le lien suivant: 

http://www.f-secure.com/products/license-terms/eult_fra.pdf 

Tu as donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que tu vas télécharger. 

Maintenant fais un clic droit sur ce lien : 

http://perso.orange.fr/il.mafioso/Navifix/navilog1.zip 

Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 

Fais un clic droit sur navilog1.zip 

et 

choisis "tout extraire" 

Ensuite double clique sur navilog1.bat 

Laisses-toi guider. 

Au menu principal, choisis 1 et valides. 

(Ne fais pas le choix 2 sans notre avis/accord) 

Patientes jusqu'au message : 

*** Analyse Termine le ..... *** 

Appuies sur une touche comme demandé, le bloc note va s'ouvrir. 

Copies-colles l'intégralité dans une réponse. 

Refermes le bloc note. 

Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

philae83 · Answer

c pas grave, tu peux y aller sans problème. Juste que je ne suive plus le sujet.

bonne soirée Marie

salimel · Answer

merci pour la réponse alors j'ai fais le scan j'ai peut etre mal fait le truc parce que le rapport est court.

03/17/07 20:35:51 [Info]: BlackLight Engine 1.0.55 initialized
03/17/07 20:35:51 [Info]: OS: 5.1 build 2600 (Service Pack 2)
03/17/07 20:35:51 [Note]: 7019 4
03/17/07 20:35:51 [Note]: 7005 0
03/17/07 20:35:51 [Note]: 7006 0
03/17/07 20:35:51 [Note]: 7011 2824
03/17/07 20:35:54 [Note]: 7026 0
03/17/07 20:35:54 [Note]: 7026 0
03/17/07 20:36:07 [Note]: FSRAW library version 1.7.1021
03/17/07 20:39:19 [Note]: 4013 62293
03/17/07 20:39:19 [Note]: 4020 29 65536
03/17/07 20:39:19 [Note]: 4018 29 65536
03/17/07 20:39:19 [Note]: 4013 62293
03/17/07 20:39:19 [Note]: 4020 29 65536
03/17/07 20:39:19 [Note]: 4018 29 65536
03/17/07 20:40:14 [Note]: 7007 0

philae83 · Answer

re
comme je ne vois pas marie revenir, je continue pour l'instant

* Télécharge VundoFix.exe (par Atribune) sur ton Bureau

http://www.atribune.org/ccount/click.php?id=4

 * Double-clique VundoFix.exe afin de le lancer

* Clique sur le bouton Scan for Vundo

* Lorsque le scan est complété, clique sur le bouton Remove Vundo

* Une invite te demandera si tu veux supprimer les fichiers, clique YES

* Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers

* Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK

* Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse

 
Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".

salimel · Answer

désoler pour le retard mon ordi bug bref je fais le scan de suite !


alors voilà le resdultat du scan 
C:\WINDOWS\system32tstv.bak1
C:\WINDOWS\system32tstv.bak2
C:\WINDOWS\system32tstv.ini
C:\WINDOWS\system32tstv.ini2
C:\WINDOWS\system32tstv.tmp
C:\WINDOWS\system32\vtstr.dll


et le rapport de hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 22:15:26, on 17/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Program Files\QuickTime\qttask.exe
E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
E:\Program Files\BitComet\BitComet.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Parents\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {039A9A11-3C28-45F1-976C-4B182902AC0A} - (no file)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet	ools\BitCometBHO.dll
O2 - BHO: (no name) - {59428994-3830-4E06-B67F-CA63A567B89A} - (no file)
O2 - BHO: (no name) - {5BCBF831-6ABF-4E79-8D4F-FC1B28638F9D} - (no file)
O2 - BHO: (no name) - {63ACC09C-DF04-4586-8D72-1DE2F9923F12} - C:\WINDOWS\system32\vtstr.dll (file missing)
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: (no name) - {7b4d79df-9ef0-429d-a0e9-d9b138c6a53b} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {92907B6E-BB33-4B59-B816-3AF072A2D5F1} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB001" /M "Stylus D68"
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVP] "E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS\system32\gixqtnqt.dll",setvm
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [BitComet] "E:\Program Files\BitComet\BitComet.exe"
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKCU\..\Run: [eMuleAutoStart] E:\Program Files\eMule\emule.exe -AutoStart
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Documents and Settings\Sarah\Mes documents\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Documents and Settings\Sarah\Mes documents\MediaManager\grab.html
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Réglage rapide de Outpost Firewall Pro - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by15fd.bay15.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - 
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - 
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - 
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - 
O16 - DPF: {D28C3640-A6D7-4668-A53C-07A9CF67D157} (CFnacComposantCtrl Object) - https://www.fnacmusic.com/telechargementFnacmusic/FnacComposant.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: byxwxuu - C:\WINDOWS\
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: winpsa32 - winpsa32.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

philae83 · Answer

reposte pour voir tout le contenu de :

C:\vundofix.txt

salimel · Answer

le rapport

VundoFix V6.3.16

Checking Java version...

Sun Java not detected
Scan started at 21:52:03 17/03/2007

Listing files found while scanning....

C:\WINDOWS\system32\rtstv.bak1
C:\WINDOWS\system32\rtstv.bak2
C:\WINDOWS\system32\rtstv.ini
C:\WINDOWS\system32\rtstv.ini2
C:\WINDOWS\system32\rtstv.tmp
C:\WINDOWS\system32\vtstr.dll

Beginning removal...

 Attempting to delete C:\WINDOWS\system32\rtstv.bak1
C:\WINDOWS\system32\rtstv.bak1 Has been deleted!

 Attempting to delete C:\WINDOWS\system32\rtstv.bak2
C:\WINDOWS\system32\rtstv.bak2 Has been deleted!

 Attempting to delete C:\WINDOWS\system32\rtstv.ini
C:\WINDOWS\system32\rtstv.ini Has been deleted!

 Attempting to delete C:\WINDOWS\system32\rtstv.ini2
C:\WINDOWS\system32\rtstv.ini2 Has been deleted!

 Attempting to delete C:\WINDOWS\system32\rtstv.tmp
C:\WINDOWS\system32\rtstv.tmp Has been deleted!

 Attempting to delete C:\WINDOWS\system32\vtstr.dll
C:\WINDOWS\system32\vtstr.dll Has been deleted!

Performing Repairs to the registry.
Done!

philae83 · Answer

re

merci cette fois il est entier.

* Relance Vundofix
 * Ne clique pas sur "Scan for a vundo"
 * Clique droit au milieu de la fenêtre
 * Clique sur Add more files ?
 * Copie/colle les fichiers ci-dessous ( un par case) :

C:\WINDOWS\SYSTEM32\byxwxuu.dll
C:\WINDOWS\system32\gixqtnqt.dll

* Clique sur Add files
 * Ensuite clique sur Close Windows
 * Enfin, clique sur Remove Vundo ( les fichiers précédents doivent apparaitre dans la fenêtre principale)
 * Si l'outils demande un redémarrage, accepte
 * Poste le rapport Vundofix, 

puis


* lance Hijackthis "do a system scan only" puis coche ces lignes :

O2 - BHO: (no name) - {039A9A11-3C28-45F1-976C-4B182902AC0A} - (no file)
O2 - BHO: (no name) - {59428994-3830-4E06-B67F-CA63A567B89A} - (no file)
O2 - BHO: (no name) - {5BCBF831-6ABF-4E79-8D4F-FC1B28638F9D} - (no file)
O2 - BHO: (no name) - {63ACC09C-DF04-4586-8D72-1DE2F9923F12} - C:\WINDOWS\system32\vtstr.dll (file missing)
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: (no name) - {7b4d79df-9ef0-429d-a0e9-d9b138c6a53b} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {92907B6E-BB33-4B59-B816-3AF072A2D5F1} - (no file) 
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot 
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 
O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS\system32\gixqtnqt.dll",setvm 
O4 - HKCU\..\Run: [eMuleAutoStart] E:\Program Files\eMule\emule.exe -AutoStart 
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by15fd.bay15.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} -
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} -
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -
O16 - DPF: {D28C3640-A6D7-4668-A53C-07A9CF67D157} (CFnacComposantCtrl Object) - https://www.fnacmusic.com/telechargementFnacmusic/FnacComposant.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab 
O20 - Winlogon Notify: byxwxuu - C:\WINDOWS\ 
O20 - Winlogon Notify: winpsa32 - winpsa32.dll (file missing) 

* toutes fenêtres fermées y compris internet explorer clique sur "fix checked"

puis poste le rapport de vundo ainsi qu'un nouveau rapport Hijackthis stp

salimel · Answer

voilà pour le rapport hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 23:11:48, on 17/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE
E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
E:\Program Files\BitComet\BitComet.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Parents\Bureau\VundoFix.exe
C:\Documents and Settings\Parents\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet	ools\BitCometBHO.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB001" /M "Stylus D68"
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [AVP] "E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [BitComet] "E:\Program Files\BitComet\BitComet.exe"
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Documents and Settings\Sarah\Mes documents\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Documents and Settings\Sarah\Mes documents\MediaManager\grab.html
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Réglage rapide de Outpost Firewall Pro - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - E:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

le rapport vundo


VundoFix V6.3.16

Checking Java version...

Sun Java not detected
Scan started at 21:52:03 17/03/2007

Listing files found while scanning....

C:\WINDOWS\system32tstv.bak1
C:\WINDOWS\system32tstv.bak2
C:\WINDOWS\system32tstv.ini
C:\WINDOWS\system32tstv.ini2
C:\WINDOWS\system32tstv.tmp
C:\WINDOWS\system32\vtstr.dll

Beginning removal...

 Attempting to delete C:\WINDOWS\system32tstv.bak1
C:\WINDOWS\system32tstv.bak1 Has been deleted!

 Attempting to delete C:\WINDOWS\system32tstv.bak2
C:\WINDOWS\system32tstv.bak2 Has been deleted!

 Attempting to delete C:\WINDOWS\system32tstv.ini
C:\WINDOWS\system32tstv.ini Has been deleted!

 Attempting to delete C:\WINDOWS\system32tstv.ini2
C:\WINDOWS\system32tstv.ini2 Has been deleted!

 Attempting to delete C:\WINDOWS\system32tstv.tmp
C:\WINDOWS\system32tstv.tmp Has been deleted!

 Attempting to delete C:\WINDOWS\system32\vtstr.dll
C:\WINDOWS\system32\vtstr.dll Has been deleted!

Performing Repairs to the registry.
Done!

Beginning removal...

Beginning removal...

Performing Repairs to the registry.
Done!

philae83 · Answer

re normal je ne pense pas, doit y avoir le nouveau, mais c'est pas grave, visiblement c'est pas mal

* lance AVG antispyware pour un scan complet et poste le rapport ensuite stp

salimel · Answer

voila le rapport avg

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	00:26:06 18/03/2007

 + Résultat de l'analyse:	



HKU\S-1-5-21-1957994488-2077806209-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A29A79A-B9C8-44A9-BEDF-7FADDE3CF33F} -> Adware.Generic : Ignoré.
C:\Documents and Settings\Parents\Local Settings\Temporary Internet Files\Content.IE5\1RG5H3B2\cr_obj[1].htm -> Downloader.Psyme.cd : Ignoré.


Fin du rapport

philae83 · Answer

as tu sauvegardé le rapport d'AVG avant d'appliquer les actions ?

salimel · Answer

oui

philae83 · Answer

ca m'a l'air ok, ton pc se comporte comment ?

salimel · Answer

il va bien visiblement, je n'ai pas eu de pub depuis un bail! merci beaucoup de m'avoir aidée je m'en serai pas sortie autrement.

philae83 · Answer

re

parfait,
tu peux supprimer
blacklight
vundofix
et 
C:\vundofix.txt 

et

démarrer-----------panneau de configuration------------système----------

onglet Restauration système-----------coche la case (Désactiver la restauration système)--------------

redémarre l'ordinateur
ré active la.

pense également à mettre ton sujet en RESOLU stp. Merci

regarde aussi ces liens :
securite proteger un ordinateur contre les malwares d internet
et
https://forum.pcastuces.com/default.asp

bon we

salimel · Answer

ok
merci bon week end à toi aussi

^^Marie^^ · Answer

Merci Philae
J'ai déconnecté plus tôt que prévu

A+

philae83 · Answer

de rien Marie, ne te voyant plus, j'ai pris le relais

tollirom · Answer

j ai le meme souci posté hier. plouf plouf avait répondu en me demandant de poster les 3 rapports suivants...quelqu un peut il m aider?!!! merciiii!!


---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 01:16:43 17/03/2007

+ Résultat de l'analyse:



:mozilla.16:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.17:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.93:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.94:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.44:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.45:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.47:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.48:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.49:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.50:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.62:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.134:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.135:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.191:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.192:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.45:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.46:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.59:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.60:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.63:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.64:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.100:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.93:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.94:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.95:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.99:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.55:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.64:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.68:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.85:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.222:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.87:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.341:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.342:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.343:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.58:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.61:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.62:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.138:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.139:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.140:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.141:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.12:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.12:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.26:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Momo\Cookies\momo@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.118:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.43:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.96:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.202:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.203:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.204:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.333:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.136:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.66:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.233:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Findwhat : Nettoyé.
:mozilla.31:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.32:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.41:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.43:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.63:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.56:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.57:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.380:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Paypal : Nettoyé.
:mozilla.53:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Pro-market : Nettoyé.
:mozilla.54:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Pro-market : Nettoyé.
:mozilla.85:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.86:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.64:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.65:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.66:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.67:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.68:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.70:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.71:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.72:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.76:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.77:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.79:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.215:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.308:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.309:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.310:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.311:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.312:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.88:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.89:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.90:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.91:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.92:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.14:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.15:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.16:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.17:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.18:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.19:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.90:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.91:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.92:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.22:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.45:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.51:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.52:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.53:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.145:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.69:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.13:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.14:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.15:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.23:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.24:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.25:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.26:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.38:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.39:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.351:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.97:C:\Documents and Settings\Clémence\Application Data\Mozilla\Firefox\Profiles\ulity3ij.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.22:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.23:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.24:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.25:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.26:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.27:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.72:C:\Documents and Settings\Stanislas\Application Data\Mozilla\Firefox\Profiles\6bx2hbjs.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.120:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.121:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.122:C:\Documents and Settings\Momo\Application Data\Mozilla\Firefox\Profiles\1hkaqku6.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.

Fin du rapport
--------------

BitDefender Online Scanner - Real Time Virus Report
Generated at: Sat, Mar 17, 2007 - 18:45:59
Scan Info
Scanned Files365094
Infected Files
2
Virus Detected
Exploit.Iframe.Vulnerability
2
------------------

Logfile of HijackThis v1.99.1
Scan saved at 18:52:06, on 17/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avast4\aswUpdSv.exe
C:\Program Files\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver\LVCOMS.EXE
C:\PROGRA~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logitech\KhalShared\KHALMNPR.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.5.0_10\bin\jucheck.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver\LVCOMS.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - Startup: Weezo.lnk = ?
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Weezo.lnk = C:\Program Files\Weezo\bin\Weezo.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/default.aspx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

merci pour votre aide !

philae83 · Answer

bonjour   tollirom
il faut que tu te créés un "nouveau sujet" stp Merci

Pub intempestives sur firefox et IE

22 réponses

Discussions similaires