Sujet Précédent Sujet Suivant

[Troyen/Virus] Infecté par Win32:VBStat-C ?

Fermé
Jyver - 2 avril 2007 à 13:48
salwa5 Messages postés 7452 Date d'inscription jeudi 30 novembre 2006 Statut Contributeur Dernière intervention 18 août 2012 - 4 avril 2007 à 19:24
Bonjour,

J'ai plein de fenetres qui s'ouvrent avec de la pub et des demandes de téléchargement d'antivirus. Je crois que j'ai un troyen mais je sais pas lequel. J'ai lu différentes solution sur différents forum mais j'ai l'impression que la solution est personnalisée. Voici mon rapport Hijackthis. (merci de m'indiquer ou se situe la ligne indiquant la présence d'un toren/virus)
Merci de vos réponses.

Rapport :

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 13:32:50, on 02/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avast4\aswUpdSv.exe
C:\Program Files\Avast4\ashServ.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Bureau\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {21CB6716-A3DE-4322-9807-FD291C9F5098} - C:\WINDOWS\system32\opppm.dll
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: (no name) - {57E218E6-5A80-4f0c-AB25-83598F25D7E9} - C:\WINDOWS\system32\vxcggkqi.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {C003C49F-53E4-4A72-B7D6-0B2B9997392F} - (no file)
O2 - BHO: (no name) - {E44527F6-1296-4A84-B67D-A6CEA6ED4B69} - C:\WINDOWS\system32\opnoomm.dll
O2 - BHO: (no name) - {E50B5F5A-531A-4020-A05B-97D17B08D1Ae} - C:\WINDOWS\system32\xtcvwaqt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [Iomega Automatic Backup 1.0.1] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PDF3 Registry Controller] "C:\Program Files\ScanSoft\PDF Professional 3.0\\RegistryController.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\mgwirons.dll",setvm
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\System32\mstask.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Configuration de la neuf Box] C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir le fichier PDF dans Word (PDF Converter 3.0) - res://C:\Program Files\ScanSoft\PDF Professional 3.0\IEShellExt.dll /300
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A9D0277E-E053-424A-A833-9B1877CAFC16}: NameServer = 84.103.237.140,86.64.145.40
O20 - Winlogon Notify: opnoomm - C:\WINDOWS\SYSTEM32\opnoomm.dll
O20 - Winlogon Notify: opppm - C:\WINDOWS\system32\opppm.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Avast4\ashWebSv.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\System32\Imapi.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe
A voir également:

7 réponses

Réponse 1 / 7
salwa5 Messages postés 7452 Date d'inscription jeudi 30 novembre 2006 Statut Contributeur Dernière intervention 18 août 2012 1 644
2 avril 2007 à 18:13
bonjour

Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
http://www.atribune.org/ccount/click.php?id=4

Double-clique VundoFix.exe afin de le lancer.
Coche Run VundoFix as a task.
Un message t'avertira que l'outil va se fermer et s'ouvrir à nouveau : clique Ok
Clique sur le bouton Scan for Vundo.

Lorsque le scan est complété, clique sur le bouton Remove Vundo.
Une invite te demandera si tu veux supprimer les fichiers, clique YES
Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown") ; clique OK
Démarre ton PC à nouveau.
Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse

a+++
0
Jyver
2 avril 2007 à 21:08
Merci de ton aide
voici le rapport Vundo :


VundoFix V6.3.19

Checking Java version...

Java version is 1.5.0.11

Scan started at 20:03:57 02/04/2007

Listing files found while scanning....

C:\WINDOWS\system32\mpppo.bak1
C:\WINDOWS\system32\mpppo.bak2
C:\WINDOWS\system32\mpppo.ini
C:\WINDOWS\system32\opnoomm.dll
C:\WINDOWS\system32\opppm.dll
C:\WINDOWS\system32\vxcggkqi.dll
C:\WINDOWS\system32\yayaywt.dll

VundoFix V6.3.19

Checking Java version...

Java version is 1.5.0.11

Scan started at 20:36:12 02/04/2007

Listing files found while scanning....

C:\WINDOWS\system32\mpppo.bak1
C:\WINDOWS\system32\mpppo.bak2
C:\WINDOWS\system32\mpppo.ini
C:\WINDOWS\system32\opnoomm.dll
C:\WINDOWS\system32\opppm.dll
C:\WINDOWS\system32\vxcggkqi.dll
C:\WINDOWS\system32\yayaywt.dll

Beginning removal...

Attempting to delete C:\WINDOWS\system32\mpppo.bak1
C:\WINDOWS\system32\mpppo.bak1 Has been deleted!

Attempting to delete C:\WINDOWS\system32\mpppo.bak2
C:\WINDOWS\system32\mpppo.bak2 Has been deleted!

Attempting to delete C:\WINDOWS\system32\mpppo.ini
C:\WINDOWS\system32\mpppo.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\opnoomm.dll
C:\WINDOWS\system32\opnoomm.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\opppm.dll
C:\WINDOWS\system32\opppm.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\yayaywt.dll
C:\WINDOWS\system32\yayaywt.dll Has been deleted!

Performing Repairs to the registry.
Done!


Et celui Hijackthis!

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 21:04:49, on 02/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Avast4\aswUpdSv.exe
C:\Program Files\Avast4\ashServ.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Bureau\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {21CB6716-A3DE-4322-9807-FD291C9F5098} - C:\WINDOWS\system32\opppm.dll (file missing)
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {C003C49F-53E4-4A72-B7D6-0B2B9997392F} - (no file)
O2 - BHO: (no name) - {E44527F6-1296-4A84-B67D-A6CEA6ED4B69} - C:\WINDOWS\system32\opnoomm.dll (file missing)
O2 - BHO: (no name) - {E50B5F5A-531A-4020-A05B-97D17B08D1Ae} - C:\WINDOWS\system32\xtcvwaqt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [Iomega Automatic Backup 1.0.1] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PDF3 Registry Controller] "C:\Program Files\ScanSoft\PDF Professional 3.0\\RegistryController.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\mgwirons.dll",setvm
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\System32\mstask.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Configuration de la neuf Box] C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir le fichier PDF dans Word (PDF Converter 3.0) - res://C:\Program Files\ScanSoft\PDF Professional 3.0\IEShellExt.dll /300
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A9D0277E-E053-424A-A833-9B1877CAFC16}: NameServer = 84.103.237.140,86.64.145.40
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Avast4\ashWebSv.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\System32\Imapi.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe
0
Réponse 2 / 7
salwa5 Messages postés 7452 Date d'inscription jeudi 30 novembre 2006 Statut Contributeur Dernière intervention 18 août 2012 1 644
2 avril 2007 à 21:58
ok tu peu supprimer vundofix

maintenant telecharge ceci

VirtumundoBegone
Télécharge VirtumundoBegone sur le bureau:
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe"
target=_blank
>http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Double clique ensuite sur VirtumundoBeGone.exe et suis les
instructions.
Une fois terminé, redémarre et poste le rapport VBG.TXT créé sur le
bureau dans ta prochaine réponse avec un nouveau rapport HijackThis.
Ne t'inquiète pas si tu vois un message Ecran bleu "Erreur fatale",
c'est normal et attendu.

a++
0
Jyver
2 avril 2007 à 22:59
C'est fait
J'ai redémarré manuellement. J'ai toujours le MEME MESSAGE D'ERREUR de la dll ! Que faire ?

Voici le rapport VBG :


[04/02/2007, 22:47:57] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Bureau\VirtumundoBeGone.exe" )
[04/02/2007, 22:48:11] - Detected System Information:
[04/02/2007, 22:48:11] - Windows Version: 5.1.2600, Service Pack 2
[04/02/2007, 22:48:11] - Current Username: Julien (Admin)
[04/02/2007, 22:48:11] - Windows is in NORMAL mode.
[04/02/2007, 22:48:11] - Searching for Browser Helper Objects:
[04/02/2007, 22:48:11] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[04/02/2007, 22:48:11] - BHO 2: {21CB6716-A3DE-4322-9807-FD291C9F5098} ()
[04/02/2007, 22:48:11] - WARNING: BHO has no default name. Checking for Winlogon reference.
[04/02/2007, 22:48:11] - Checking for HKLM\...\Winlogon\Notify\opppm
[04/02/2007, 22:48:12] - Key not found: HKLM\...\Winlogon\Notify\opppm, continuing.
[04/02/2007, 22:48:12] - BHO 3: {259F616C-A300-44F5-B04A-ED001A26C85C} ()
[04/02/2007, 22:48:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[04/02/2007, 22:48:12] - No filename found. Continuing.
[04/02/2007, 22:48:12] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[04/02/2007, 22:48:12] - BHO 5: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
[04/02/2007, 22:48:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[04/02/2007, 22:48:12] - No filename found. Continuing.
[04/02/2007, 22:48:12] - BHO 6: {C003C49F-53E4-4A72-B7D6-0B2B9997392F} ()
[04/02/2007, 22:48:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[04/02/2007, 22:48:12] - No filename found. Continuing.
[04/02/2007, 22:48:12] - BHO 7: {E44527F6-1296-4A84-B67D-A6CEA6ED4B69} ()
[04/02/2007, 22:48:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[04/02/2007, 22:48:12] - Checking for HKLM\...\Winlogon\Notify\opnoomm
[04/02/2007, 22:48:12] - Key not found: HKLM\...\Winlogon\Notify\opnoomm, continuing.
[04/02/2007, 22:48:12] - BHO 8: {E50B5F5A-531A-4020-A05B-97D17B08D1Ae} ()
[04/02/2007, 22:48:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[04/02/2007, 22:48:12] - Checking for HKLM\...\Winlogon\Notify\xtcvwaqt
[04/02/2007, 22:48:12] - Key not found: HKLM\...\Winlogon\Notify\xtcvwaqt, continuing.
[04/02/2007, 22:48:12] - Finished Searching Browser Helper Objects
[04/02/2007, 22:48:12] - Finishing up...
[04/02/2007, 22:48:12] - Nothing found! Exiting...

et le Hijackthis :

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 22:57:22, on 02/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Avast4\aswUpdSv.exe
C:\Program Files\Avast4\ashServ.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Bureau\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {21CB6716-A3DE-4322-9807-FD291C9F5098} - C:\WINDOWS\system32\opppm.dll (file missing)
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {C003C49F-53E4-4A72-B7D6-0B2B9997392F} - (no file)
O2 - BHO: (no name) - {E44527F6-1296-4A84-B67D-A6CEA6ED4B69} - C:\WINDOWS\system32\opnoomm.dll (file missing)
O2 - BHO: (no name) - {E50B5F5A-531A-4020-A05B-97D17B08D1Ae} - C:\WINDOWS\system32\xtcvwaqt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [Iomega Automatic Backup 1.0.1] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PDF3 Registry Controller] "C:\Program Files\ScanSoft\PDF Professional 3.0\\RegistryController.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\mgwirons.dll",setvm
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\System32\mstask.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Configuration de la neuf Box] C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir le fichier PDF dans Word (PDF Converter 3.0) - res://C:\Program Files\ScanSoft\PDF Professional 3.0\IEShellExt.dll /300
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A9D0277E-E053-424A-A833-9B1877CAFC16}: NameServer = 84.103.237.140,86.64.145.40
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Avast4\ashWebSv.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\System32\Imapi.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe
0
Réponse 3 / 7
salwa5 Messages postés 7452 Date d'inscription jeudi 30 novembre 2006 Statut Contributeur Dernière intervention 18 août 2012 1 644
3 avril 2007 à 00:12
rebonsoir

ouvre hijackthis coches ces lignes puis clic sur fix checked

O2 - BHO: (no name) - {21CB6716-A3DE-4322-9807-FD291C9F5098} - C:\WINDOWS\system32\opppm.dll (file missing)
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {C003C49F-53E4-4A72-B7D6-0B2B9997392F} - (no file)
O2 - BHO: (no name) - {E44527F6-1296-4A84-B67D-A6CEA6ED4B69} - C:\WINDOWS\system32\opnoomm.dll (file missing)
O2 - BHO: (no name) - {E50B5F5A-531A-4020-A05B-97D17B08D1Ae} - C:\WINDOWS\system32\xtcvwaqt.dll

O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\mgwirons.dll",setvm


telecharge et executes


AVG anti spyware
https://www.01net.com/telecharger/

(n'oublie pas de le mettre a jour avant de lancer le scan)


Relance AVG AS puis choisis l'onglet "Analyse"
Puis l'onglet "Paramètres"
Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine"
Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

/!\ Si un fichier est infecté en fin d'analyse /!\
Clique sur "Appliquer toutes les actions "

Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
Enregistre ce fichier texte sur ton bureau ensuite colle le raport ici

supprime les fichiers inutiles (fichiers temporaire , cookies .. ect avec ceci

Ccleaner
https://www.malekal.com/tutoriel-ccleaner/


a++++
0
Jyver
3 avril 2007 à 18:11
Voila le resultat du scan : il a trouvé des trucs.

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 18:00:25 03/04/2007

+ Résultat de l'analyse:



C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Local Settings\Temporary Internet Files\Content.IE5\C16J4T6R\WinAntiVirusPro2006FreeInstall_fr[1].cab/UWA6PV_0001_N91M2107NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Nettoyé.
:mozilla.117:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.118:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.119:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.120:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.121:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.122:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.123:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.22:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.210:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.211:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.212:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.213:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.214:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.215:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.216:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.217:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.218:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.219:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.220:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.221:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.222:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.223:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.224:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.225:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.226:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.548:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.186:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.187:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.188:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.134:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.135:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.150:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.151:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.156:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.157:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.158:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.159:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.160:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.73:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.74:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.75:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.76:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.200:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@adviva[1].txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.12:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.195:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.13:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.149:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.660:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.661:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.662:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.663:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.664:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.131:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.132:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.133:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.142:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.143:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.144:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.145:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.146:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.128:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.67:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.148:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.227:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.200:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.201:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.202:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.203:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.204:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.205:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.206:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.207:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.208:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.209:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.265:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.266:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.267:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.268:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.269:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.892:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.114:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.264:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.35:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.599:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.772:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.774:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.824:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.136:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.137:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.138:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.139:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.140:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.141:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.151:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.261:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.262:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.362:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.592:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.687:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.758:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.759:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.81:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.82:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.83:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.444:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Idot : Nettoyé.
:mozilla.169:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.170:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.222:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.223:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.587:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Itrack : Nettoyé.
:mozilla.588:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Itrack : Nettoyé.
:mozilla.589:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Itrack : Nettoyé.
:mozilla.590:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Itrack : Nettoyé.
:mozilla.591:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Itrack : Nettoyé.
:mozilla.174:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.175:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.176:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.177:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.205:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.354:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.718:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.719:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.677:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Paypal : Nettoyé.
:mozilla.265:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.267:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.268:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.269:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.276:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.508:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Revenue : Nettoyé.
:mozilla.347:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.348:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.349:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.350:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.351:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.352:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.353:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.58:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.59:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.60:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.61:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.62:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.63:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.427:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sexlist : Nettoyé.
:mozilla.115:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.116:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.559:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.566:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.578:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.579:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.580:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.601:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.603:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.780:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.10:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.11:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.124:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.125:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.126:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.127:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.9:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.299:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.300:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.301:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.302:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.183:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Toplist : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@toplist[1].txt -> TrackingCookie.Toplist : Nettoyé.
:mozilla.10:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.11:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.12:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.64:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.65:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.66:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.6:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.7:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.8:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.9:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.17:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.188:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.189:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.18:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.193:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.194:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.20:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.21:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.237:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.682:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.816:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.817:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.841:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.842:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.843:C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Application Data\Mozilla\Firefox\Profiles\s7vrtt18.default\cookies-1.txt -> TrackingCookie.Zedo : Nettoyé.
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Cookies\julien@zedo[2].txt -> TrackingCookie.Zedo : Nettoyé.


Fin du rapport

Quelle suite ? merci d'avance
0
Réponse 4 / 7
salwa5 Messages postés 7452 Date d'inscription jeudi 30 novembre 2006 Statut Contributeur Dernière intervention 18 août 2012 1 644
3 avril 2007 à 18:49
ok lance ccleaner puis poste un nouveau raport hijacthis

a+++
0
Jyver
3 avril 2007 à 21:43
Ok j'en avais fait un CCleaner...

Voila le rapport Hijackthis:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 21:39:50, on 03/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avast4\aswUpdSv.exe
C:\Program Files\Avast4\ashServ.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Julien.JULIEN-HPZCREDF\Bureau\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = 192.168.30.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [Iomega Automatic Backup 1.0.1] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PDF3 Registry Controller] "C:\Program Files\ScanSoft\PDF Professional 3.0\\RegistryController.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\System32\mstask.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Configuration de la neuf Box] C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir le fichier PDF dans Word (PDF Converter 3.0) - res://C:\Program Files\ScanSoft\PDF Professional 3.0\IEShellExt.dll /300
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A9D0277E-E053-424A-A833-9B1877CAFC16}: NameServer = 84.103.237.140,86.64.145.40
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\System32\Imapi.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 7
salwa5 Messages postés 7452 Date d'inscription jeudi 30 novembre 2006 Statut Contributeur Dernière intervention 18 août 2012 1 644
3 avril 2007 à 21:53
bonsoir ouvre hijacthis coche cette ligne puis clic sur fix checked


O4 - Startup: PowerReg Scheduler V3.exe


configure kerio correctement en suivant les indications de ce site

tuto

http://www.malekal.com/kerio_firewall.php

*pour plus de securité bloques les principaux ports a risque :

https://www.vulgarisation-informatique.com/bloquer-ports.php


a+++++
0
Jyver
3 avril 2007 à 22:27
Ok c'est fini alors ?
J'ai revu Kerio mais je vois pas IE et mozilla dans "securité du reseau"
anormal si on en croit le tuto (merci pour celui-ci)
Peut etre kerio me bloque-il l'accès à ma 9 box? (via le 192.168.30.1 sagem fast3302)

Merci des tes réponses.
0
Réponse 6 / 7
salwa5 Messages postés 7452 Date d'inscription jeudi 30 novembre 2006 Statut Contributeur Dernière intervention 18 août 2012 1 644
3 avril 2007 à 23:04
non je ne pense pas que kerio te bloque l'accée sinon t'aurai pas accées au net :p

as tu d'autre problemes a me signalé?

a++++
0
jyver Messages postés 50 Date d'inscription dimanche 5 juin 2005 Statut Membre Dernière intervention 10 juillet 2007 4
4 avril 2007 à 18:52
Salut et merci pour le troyen
Concernant les virus non pas d'autres questions
Par contre, je n'arrive plus à accéder a ma 9box (sagem fast 3302) par le 192.168.30.1 (je suis sur que c'est la bonne adresse)
As-tu une idée ?
Merci d'avance
0
Réponse 7 / 7
salwa5 Messages postés 7452 Date d'inscription jeudi 30 novembre 2006 Statut Contributeur Dernière intervention 18 août 2012 1 644
4 avril 2007 à 19:24
bonjour essay cette adresse http://192.168.1.1

sinon desactive kerio et essay de te connecté

a++++
0

Discussions similaires

Est ce que le site tlauncher est dangereux ?
caribou -
bazfile -

1 réponse
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Problème avec "PUADIManager:Win32/OfferCore
Knaki -
bazfile -

3 réponses
Virus détecté
Koony -
MisteryBean -

6 réponses
Menaces HackTool:Win32
LeMax5993 -
lisa4777 -

4 réponses