[Virus] Nombreuses alertes Avast

Utilisateur anonyme -  
green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour à vous,

J'ai pas l'habitude et j'aime pas jouer les assistés, mais j'avoue que là ça m'agace un peu :)

Avast me lance assez souvent et par raffales de 10 des alertes avec différentes dll incriminées (pmnomjg, ...)

J'ai un peu cherché sur la toile, mais je pense que c'est du cas par cas (?)

J'ai donc installé Hijackthis et lancé un scan ; je me tourne donc vers les habitués pour me conseiller et me guider afin de résoudre au mieux les (trés) nombreux problèmes ^_^

---------------------

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 22:54:47, on 16/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\CTsvcCDA.exe
D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\MsPMSPSv.exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\MSN Messenger\usnsvc.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
D:\WINDOWS\system32\CTHELPER.EXE
D:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\Program Files\D-Tools\daemon.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\Program Files\BitTorrent\bittorrent.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Program Files\VIA\RAID\raid_tool.exe
D:\Program Files\iPod\bin\iPodService.exe
D:\Program Files\MSN Messenger\msnmsgr.exe
D:\Documents and Settings\Céline\Bureau\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {55DB983C-BDBF-426f-86F0-187B02DDA39B} - D:\WINDOWS\system32\jupjcvmd.dll
O2 - BHO: (no name) - {56238299-39F1-4E9A-95CE-80F2E02D7A74} - D:\WINDOWS\system32\pmnomjg.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {B729EB22-0D0F-4A8F-B0AE-FF935F77AF77} - D:\WINDOWS\system32\vtstq.dll
O2 - BHO: (no name) - {CB19D0F7-829D-479E-8D76-0D607F5D4F96} - D:\WINDOWS\system32\agdvdjcy.dll
O2 - BHO: (no name) - {D67D7F6F-88F0-43B2-8D1D-BEF76D2B185c} - D:\WINDOWS\system32\agdvdjcy.dll
O2 - BHO: (no name) - {F742D88B-B22A-4715-B4FC-EF72B3729861} - D:\WINDOWS\system32\agdvdjcy.dll
O2 - BHO: (no name) - {FBB61A97-575F-4FD4-B4DF-6A1CAA4BD80a} - D:\WINDOWS\system32\agdvdjcy.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMAXPnP] D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "D:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] D:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [CTStartup] D:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] D:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WindowsUpdate] rundll32.exe "D:\WINDOWS\system32\wcixdcus.dll",realset
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [BitTorrent] "D:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "D:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Synchronizer.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: VIA RAID TOOL.lnk = D:\Program Files\VIA\RAID\raid_tool.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - Winlogon Notify: pmnomjg - D:\WINDOWS\SYSTEM32\pmnomjg.dll
O20 - Winlogon Notify: vtstq - D:\WINDOWS\system32\vtstq.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - D:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - D:\WINDOWS\system32\services.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - D:\WINDOWS\system32\imapi.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - D:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - D:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - D:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - D:\WINDOWS\System32\SCardSvr.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - D:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - D:\WINDOWS\System32\vssvc.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - D:\Program Files\RealVNC\VNC4\WinVNC4.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - D:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 9663 bytes
Configuration: Windows XP
Firefox 2.0.0.3

5 réponses

  1. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut

    pas triste :)

    Téléchargez VundoFix.exe (par Atribune) sur ton Bureau :

    http://www.atribune.org/ccount/click.php?id=4

    *Double-clique VundoFix.exe afin de le lancer.
    * Cliquez sur le bouton Scan for Vundo.
    * Lorsque le scan est complété, cliquez sur le bouton Remove Vundo.
    * Une invite vous demandera supprimer les fichiers, clique YES
    * Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers
    * le PC va s'éteindre ("shutdown") : clique OK
    * Démarrez votre PC à nouveau
    * Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse.

    ++
    0
    1. Utilisateur anonyme
       
      Merci pour cette réponse rapide :)

      ( A noter qu'au démarrage j'ai un service qui essaie a priori de tapper sur la dll wcixdcus => message d'erreur RUN DLL , comment savoir quel service ou appli essaie de loader la dll afin de le désactiver ? )


      . Voici le scan hijackthis après (edit : c'est la même chose?!) :
      ------------------------
      Logfile of Trend Micro HijackThis v2.0.0 (BETA)
      Scan saved at 23:28:18, on 16/05/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      Boot mode: Normal

      Running processes:
      D:\WINDOWS\System32\smss.exe
      D:\WINDOWS\system32\winlogon.exe
      D:\WINDOWS\system32\services.exe
      D:\WINDOWS\system32\lsass.exe
      D:\WINDOWS\system32\svchost.exe
      D:\WINDOWS\System32\svchost.exe
      D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      D:\Program Files\Alwil Software\Avast4\ashServ.exe
      D:\WINDOWS\system32\spoolsv.exe
      D:\WINDOWS\system32\CTsvcCDA.exe
      D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      D:\WINDOWS\system32\nvsvc32.exe
      D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      D:\WINDOWS\system32\svchost.exe
      D:\WINDOWS\system32\MsPMSPSv.exe
      D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      D:\WINDOWS\System32\svchost.exe
      D:\WINDOWS\Explorer.EXE
      D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
      D:\WINDOWS\system32\CTHELPER.EXE
      D:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
      D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
      D:\WINDOWS\system32\RUNDLL32.EXE
      D:\Program Files\D-Tools\daemon.exe
      D:\Program Files\MSN Messenger\MsnMsgr.Exe
      D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      D:\WINDOWS\system32\ctfmon.exe
      D:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
      D:\Program Files\Messenger\msmsgs.exe
      D:\Program Files\VIA\RAID\raid_tool.exe
      D:\Program Files\MSN Messenger\usnsvc.exe
      D:\PROGRA~1\MOZILL~1\FIREFOX.EXE
      D:\Documents and Settings\Céline\Bureau\HiJackThis_v2.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: (no name) - {55DB983C-BDBF-426f-86F0-187B02DDA39B} - D:\WINDOWS\system32\jupjcvmd.dll
      O2 - BHO: (no name) - {56238299-39F1-4E9A-95CE-80F2E02D7A74} - D:\WINDOWS\system32\pmnomjg.dll (file missing)
      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {B729EB22-0D0F-4A8F-B0AE-FF935F77AF77} - D:\WINDOWS\system32\vtstq.dll (file missing)
      O2 - BHO: (no name) - {CB19D0F7-829D-479E-8D76-0D607F5D4F96} - D:\WINDOWS\system32\agdvdjcy.dll
      O2 - BHO: (no name) - {D67D7F6F-88F0-43B2-8D1D-BEF76D2B185c} - D:\WINDOWS\system32\agdvdjcy.dll
      O2 - BHO: (no name) - {F742D88B-B22A-4715-B4FC-EF72B3729861} - D:\WINDOWS\system32\agdvdjcy.dll
      O2 - BHO: (no name) - {FBB61A97-575F-4FD4-B4DF-6A1CAA4BD80a} - D:\WINDOWS\system32\agdvdjcy.dll
      O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [SoundMAXPnP] D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
      O4 - HKLM\..\Run: [SoundMAX] "D:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] D:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [CTStartup] D:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
      O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
      O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [NeroFilterCheck] D:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [WindowsUpdate] rundll32.exe "D:\WINDOWS\system32\wcixdcus.dll",realset
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [BitTorrent] "D:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
      O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "D:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
      O4 - Global Startup: Adobe Reader Synchronizer.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
      O4 - Global Startup: VIA RAID TOOL.lnk = D:\Program Files\VIA\RAID\raid_tool.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
      O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
      O20 - Winlogon Notify: pmnomjg - pmnomjg.dll (file missing)
      O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
      O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.exe
      O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - D:\WINDOWS\System32\dmadmin.exe
      O23 - Service: Journal des événements (Eventlog) - Unknown owner - D:\WINDOWS\system32\services.exe
      O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - D:\WINDOWS\system32\imapi.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - D:\WINDOWS\system32\mnmsrvc.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - D:\WINDOWS\system32\services.exe
      O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - D:\WINDOWS\system32\sessmgr.exe
      O23 - Service: Carte à puce (SCardSvr) - Unknown owner - D:\WINDOWS\System32\SCardSvr.exe
      O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - D:\WINDOWS\system32\smlogsvc.exe
      O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - D:\WINDOWS\System32\vssvc.exe
      O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - D:\Program Files\RealVNC\VNC4\WinVNC4.exe
      O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - D:\WINDOWS\system32\wbem\wmiapsrv.exe
      0
  2. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut

    Oui, ça à évolué !

    Télécharge ComboFix (par sUBs) d'un de ces liens sur ton bureau:

    http://www.techsupportforum.com/sectools/combofix.exe

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    Double clique combofix.exe et suis les invites

    Poste le rapport stp

    ++
    0
    1. Utilisateur anonyme
       
      Bonjour


      Je ne trouve pas le rapport ComboFix ; J'ai suivi l'avancement et j'ai vu plus d'une dizaine de dll traitées.

      Il m'a indiqué que je trouverai le rapport ComboFix.txt à la racine de D, (ouai, le master c'est D 8-| ) mais je n'ai qu'un .bat portant ce nom.

      Donc pas de rapport ComboFix.


      Rapport HiJackThis :
      ------------------------
      Logfile of Trend Micro HijackThis v2.0.0 (BETA)
      Scan saved at 13:23, on 2007-05-17
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      Boot mode: Normal

      Running processes:
      D:\WINDOWS\System32\smss.exe
      D:\WINDOWS\system32\winlogon.exe
      D:\WINDOWS\system32\services.exe
      D:\WINDOWS\system32\lsass.exe
      D:\WINDOWS\system32\svchost.exe
      D:\WINDOWS\System32\svchost.exe
      D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      D:\Program Files\Alwil Software\Avast4\ashServ.exe
      D:\WINDOWS\system32\spoolsv.exe
      D:\WINDOWS\system32\CTsvcCDA.exe
      D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      D:\WINDOWS\system32\nvsvc32.exe
      D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      D:\WINDOWS\system32\svchost.exe
      D:\Program Files\RealVNC\VNC4\WinVNC4.exe
      D:\WINDOWS\system32\MsPMSPSv.exe
      D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      D:\WINDOWS\System32\svchost.exe
      D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
      D:\Program Files\Analog Devices\SoundMAX\Smax4.exe
      D:\WINDOWS\system32\CTHELPER.EXE
      D:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
      D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
      D:\WINDOWS\system32\RUNDLL32.EXE
      D:\Program Files\D-Tools\daemon.exe
      D:\WINDOWS\system32\ctfmon.exe
      D:\Program Files\MSN Messenger\msnmsgr.exe
      D:\Program Files\VIA\RAID\raid_tool.exe
      D:\Program Files\MSN Messenger\usnsvc.exe
      D:\Program Files\Mozilla Firefox\firefox.exe
      D:\WINDOWS\explorer.exe
      D:\Documents and Settings\Cédric\Bureau\anti virus log\HiJackThis_v2.exe

      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: (no name) - {55DB983C-BDBF-426f-86F0-187B02DDA39B} - D:\WINDOWS\system32\jupjcvmd.dll (file missing)
      O2 - BHO: (no name) - {56238299-39F1-4E9A-95CE-80F2E02D7A74} - D:\WINDOWS\system32\pmnomjg.dll (file missing)
      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {B729EB22-0D0F-4A8F-B0AE-FF935F77AF77} - D:\WINDOWS\system32\vtstq.dll (file missing)
      O2 - BHO: (no name) - {CB19D0F7-829D-479E-8D76-0D607F5D4F96} - D:\WINDOWS\system32\agdvdjcy.dll (file missing)
      O2 - BHO: (no name) - {D67D7F6F-88F0-43B2-8D1D-BEF76D2B185c} - D:\WINDOWS\system32\agdvdjcy.dll (file missing)
      O2 - BHO: (no name) - {F742D88B-B22A-4715-B4FC-EF72B3729861} - D:\WINDOWS\system32\agdvdjcy.dll (file missing)
      O2 - BHO: (no name) - {FBB61A97-575F-4FD4-B4DF-6A1CAA4BD80a} - D:\WINDOWS\system32\agdvdjcy.dll (file missing)
      O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [SoundMAXPnP] D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
      O4 - HKLM\..\Run: [SoundMAX] "D:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] D:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [CTStartup] D:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
      O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
      O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [NeroFilterCheck] D:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [WindowsUpdate] rundll32.exe "D:\WINDOWS\system32\wcixdcus.dll",realset
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Synchronizer.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
      O4 - Global Startup: VIA RAID TOOL.lnk = D:\Program Files\VIA\RAID\raid_tool.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
      O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
      O20 - Winlogon Notify: pmnomjg - pmnomjg.dll (file missing)
      O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
      O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.exe
      O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - D:\WINDOWS\System32\dmadmin.exe
      O23 - Service: Journal des événements (Eventlog) - Unknown owner - D:\WINDOWS\system32\services.exe
      O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - D:\WINDOWS\system32\imapi.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - D:\WINDOWS\system32\mnmsrvc.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - D:\WINDOWS\system32\services.exe
      O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - D:\WINDOWS\system32\sessmgr.exe
      O23 - Service: Carte à puce (SCardSvr) - Unknown owner - D:\WINDOWS\System32\SCardSvr.exe
      O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - D:\WINDOWS\system32\smlogsvc.exe
      O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - D:\WINDOWS\System32\vssvc.exe
      O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - D:\Program Files\RealVNC\VNC4\WinVNC4.exe
      O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - D:\WINDOWS\system32\wbem\wmiapsrv.exe
      0
  3. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut

    ok, apparemment, il a bien travailler !

    Télécharge VirtumundoBegone sur le bureau:
    http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

    Double clique ensuite sur VirtumundoBeGone.exe et suis les instructions.
    Une fois terminé, redémarre et poste le rapport VBG.TXT créé sur le bureau dans ta prochaine réponse avec un nouveau rapport HijackThis.
    Ne t'inquiète pas si tu vois un message Ecran bleu "Erreur fatale", c'est normal et attendu

    ++
    0
    1. Utilisateur anonyme
       
      Re,

      Voici le rapport VBG :
      --------------------------
      [05/17/2007, 15:33:29] - VirtumundoBeGone v1.5 ( "D:\Documents and Settings\Cédric\Bureau\VirtumundoBeGone.exe" )
      [05/17/2007, 15:33:40] - Detected System Information:
      [05/17/2007, 15:33:40] - Windows Version: 5.1.2600, Service Pack 2
      [05/17/2007, 15:33:40] - Current Username: Cédric (Admin)
      [05/17/2007, 15:33:40] - Windows is in NORMAL mode.
      [05/17/2007, 15:33:40] - Searching for Browser Helper Objects:
      [05/17/2007, 15:33:40] - BHO 1: {53707962-6F74-2D53-2644-206D7942484F} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - Checking for HKLM\...\Winlogon\Notify\SDHelper
      [05/17/2007, 15:33:40] - Key not found: HKLM\...\Winlogon\Notify\SDHelper, continuing.
      [05/17/2007, 15:33:40] - BHO 2: {55DB983C-BDBF-426f-86F0-187B02DDA39B} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - Checking for HKLM\...\Winlogon\Notify\jupjcvmd
      [05/17/2007, 15:33:40] - Key not found: HKLM\...\Winlogon\Notify\jupjcvmd, continuing.
      [05/17/2007, 15:33:40] - BHO 3: {56238299-39F1-4E9A-95CE-80F2E02D7A74} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - Checking for HKLM\...\Winlogon\Notify\pmnomjg
      [05/17/2007, 15:33:40] - Found: HKLM\...\Winlogon\Notify\pmnomjg - This is probably Virtumundo.
      [05/17/2007, 15:33:40] - Assigning {56238299-39F1-4E9A-95CE-80F2E02D7A74} MSEvents Object
      [05/17/2007, 15:33:40] - BHO list has been changed! Starting over...
      [05/17/2007, 15:33:40] - BHO 1: {53707962-6F74-2D53-2644-206D7942484F} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - Checking for HKLM\...\Winlogon\Notify\SDHelper
      [05/17/2007, 15:33:40] - Key not found: HKLM\...\Winlogon\Notify\SDHelper, continuing.
      [05/17/2007, 15:33:40] - BHO 2: {55DB983C-BDBF-426f-86F0-187B02DDA39B} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - Checking for HKLM\...\Winlogon\Notify\jupjcvmd
      [05/17/2007, 15:33:40] - Key not found: HKLM\...\Winlogon\Notify\jupjcvmd, continuing.
      [05/17/2007, 15:33:40] - BHO 3: {56238299-39F1-4E9A-95CE-80F2E02D7A74} (MSEvents Object)
      [05/17/2007, 15:33:40] - ALERT: Found MSEvents Object!
      [05/17/2007, 15:33:40] - BHO 4: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} (Groove GFS Browser Helper)
      [05/17/2007, 15:33:40] - BHO 5: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - No filename found. Continuing.
      [05/17/2007, 15:33:40] - BHO 6: {B729EB22-0D0F-4A8F-B0AE-FF935F77AF77} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - Checking for HKLM\...\Winlogon\Notify\vtstq
      [05/17/2007, 15:33:40] - Key not found: HKLM\...\Winlogon\Notify\vtstq, continuing.
      [05/17/2007, 15:33:40] - BHO 7: {CB19D0F7-829D-479E-8D76-0D607F5D4F96} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - Checking for HKLM\...\Winlogon\Notify\agdvdjcy
      [05/17/2007, 15:33:40] - Key not found: HKLM\...\Winlogon\Notify\agdvdjcy, continuing.
      [05/17/2007, 15:33:40] - BHO 8: {D67D7F6F-88F0-43B2-8D1D-BEF76D2B185c} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - Checking for HKLM\...\Winlogon\Notify\agdvdjcy
      [05/17/2007, 15:33:40] - Key not found: HKLM\...\Winlogon\Notify\agdvdjcy, continuing.
      [05/17/2007, 15:33:40] - BHO 9: {F742D88B-B22A-4715-B4FC-EF72B3729861} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - Checking for HKLM\...\Winlogon\Notify\agdvdjcy
      [05/17/2007, 15:33:40] - Key not found: HKLM\...\Winlogon\Notify\agdvdjcy, continuing.
      [05/17/2007, 15:33:40] - BHO 10: {FBB61A97-575F-4FD4-B4DF-6A1CAA4BD80a} ()
      [05/17/2007, 15:33:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:40] - Checking for HKLM\...\Winlogon\Notify\agdvdjcy
      [05/17/2007, 15:33:40] - Key not found: HKLM\...\Winlogon\Notify\agdvdjcy, continuing.
      [05/17/2007, 15:33:40] - Finished Searching Browser Helper Objects
      [05/17/2007, 15:33:40] - *** Detected MSEvents Object
      [05/17/2007, 15:33:40] - Trying to remove MSEvents Object...
      [05/17/2007, 15:33:41] - Terminating Process: IEXPLORE.EXE
      [05/17/2007, 15:33:42] - Terminating Process: RUNDLL32.EXE
      [05/17/2007, 15:33:42] - Disabling Automatic Shell Restart
      [05/17/2007, 15:33:42] - Terminating Process: EXPLORER.EXE
      [05/17/2007, 15:33:42] - Suspending the NT Session Manager System Service
      [05/17/2007, 15:33:42] - Terminating Windows NT Logon/Logoff Manager
      [05/17/2007, 15:33:43] - Re-enabling Automatic Shell Restart
      [05/17/2007, 15:33:43] - File to disable: D:\WINDOWS\system32\pmnomjg.dll
      [05/17/2007, 15:33:43] - Removing HKLM\...\Browser Helper Objects\{56238299-39F1-4E9A-95CE-80F2E02D7A74}
      [05/17/2007, 15:33:43] - Removing HKCR\CLSID\{56238299-39F1-4E9A-95CE-80F2E02D7A74}
      [05/17/2007, 15:33:43] - Adding Kill Bit for ActiveX for GUID: {56238299-39F1-4E9A-95CE-80F2E02D7A74}
      [05/17/2007, 15:33:43] - Deleting ATLEvents/MSEvents Registry entries
      [05/17/2007, 15:33:43] - Removing HKLM\...\Winlogon\Notify\pmnomjg
      [05/17/2007, 15:33:43] - Searching for Browser Helper Objects:
      [05/17/2007, 15:33:43] - BHO 1: {53707962-6F74-2D53-2644-206D7942484F} ()
      [05/17/2007, 15:33:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:43] - Checking for HKLM\...\Winlogon\Notify\SDHelper
      [05/17/2007, 15:33:43] - Key not found: HKLM\...\Winlogon\Notify\SDHelper, continuing.
      [05/17/2007, 15:33:43] - BHO 2: {55DB983C-BDBF-426f-86F0-187B02DDA39B} ()
      [05/17/2007, 15:33:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:43] - Checking for HKLM\...\Winlogon\Notify\jupjcvmd
      [05/17/2007, 15:33:43] - Key not found: HKLM\...\Winlogon\Notify\jupjcvmd, continuing.
      [05/17/2007, 15:33:43] - BHO 3: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} (Groove GFS Browser Helper)
      [05/17/2007, 15:33:43] - BHO 4: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
      [05/17/2007, 15:33:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:43] - No filename found. Continuing.
      [05/17/2007, 15:33:43] - BHO 5: {B729EB22-0D0F-4A8F-B0AE-FF935F77AF77} ()
      [05/17/2007, 15:33:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:43] - Checking for HKLM\...\Winlogon\Notify\vtstq
      [05/17/2007, 15:33:43] - Key not found: HKLM\...\Winlogon\Notify\vtstq, continuing.
      [05/17/2007, 15:33:43] - BHO 6: {CB19D0F7-829D-479E-8D76-0D607F5D4F96} ()
      [05/17/2007, 15:33:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:43] - Checking for HKLM\...\Winlogon\Notify\agdvdjcy
      [05/17/2007, 15:33:43] - Key not found: HKLM\...\Winlogon\Notify\agdvdjcy, continuing.
      [05/17/2007, 15:33:43] - BHO 7: {D67D7F6F-88F0-43B2-8D1D-BEF76D2B185c} ()
      [05/17/2007, 15:33:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:43] - Checking for HKLM\...\Winlogon\Notify\agdvdjcy
      [05/17/2007, 15:33:43] - Key not found: HKLM\...\Winlogon\Notify\agdvdjcy, continuing.
      [05/17/2007, 15:33:43] - BHO 8: {F742D88B-B22A-4715-B4FC-EF72B3729861} ()
      [05/17/2007, 15:33:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:43] - Checking for HKLM\...\Winlogon\Notify\agdvdjcy
      [05/17/2007, 15:33:43] - Key not found: HKLM\...\Winlogon\Notify\agdvdjcy, continuing.
      [05/17/2007, 15:33:43] - BHO 9: {FBB61A97-575F-4FD4-B4DF-6A1CAA4BD80a} ()
      [05/17/2007, 15:33:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [05/17/2007, 15:33:43] - Checking for HKLM\...\Winlogon\Notify\agdvdjcy
      [05/17/2007, 15:33:43] - Key not found: HKLM\...\Winlogon\Notify\agdvdjcy, continuing.
      [05/17/2007, 15:33:43] - Finished Searching Browser Helper Objects
      [05/17/2007, 15:33:43] - Finishing up...
      [05/17/2007, 15:33:43] - A restart is needed.
      [05/17/2007, 15:33:51] - Attempting to Restart via STOP error (Blue Screen!)



      Et celui de HiJackthis :
      ---------------------------
      Logfile of Trend Micro HijackThis v2.0.0 (BETA)
      Scan saved at 15:37, on 2007-05-17
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      Boot mode: Normal

      Running processes:
      D:\WINDOWS\System32\smss.exe
      D:\WINDOWS\system32\winlogon.exe
      D:\WINDOWS\system32\services.exe
      D:\WINDOWS\system32\lsass.exe
      D:\WINDOWS\system32\svchost.exe
      D:\WINDOWS\System32\svchost.exe
      D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      D:\Program Files\Alwil Software\Avast4\ashServ.exe
      D:\WINDOWS\system32\spoolsv.exe
      D:\WINDOWS\system32\CTsvcCDA.exe
      D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      D:\WINDOWS\system32\nvsvc32.exe
      D:\WINDOWS\Explorer.EXE
      D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      D:\WINDOWS\system32\svchost.exe
      D:\Program Files\RealVNC\VNC4\WinVNC4.exe
      D:\WINDOWS\system32\MsPMSPSv.exe
      D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
      D:\Program Files\Analog Devices\SoundMAX\Smax4.exe
      D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      D:\WINDOWS\system32\CTHELPER.EXE
      D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      D:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
      D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
      D:\WINDOWS\system32\RUNDLL32.EXE
      D:\Program Files\D-Tools\daemon.exe
      D:\WINDOWS\system32\ctfmon.exe
      D:\Program Files\MSN Messenger\msnmsgr.exe
      D:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
      D:\Program Files\VIA\RAID\raid_tool.exe
      D:\WINDOWS\System32\svchost.exe
      D:\Program Files\MSN Messenger\usnsvc.exe
      D:\WINDOWS\system32\wuauclt.exe
      D:\Program Files\Mozilla Firefox\firefox.exe
      D:\Documents and Settings\Cédric\Bureau\anti virus log\HiJackThis_v2.exe

      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: (no name) - {55DB983C-BDBF-426f-86F0-187B02DDA39B} - D:\WINDOWS\system32\jupjcvmd.dll (file missing)
      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {B729EB22-0D0F-4A8F-B0AE-FF935F77AF77} - D:\WINDOWS\system32\vtstq.dll (file missing)
      O2 - BHO: (no name) - {CB19D0F7-829D-479E-8D76-0D607F5D4F96} - D:\WINDOWS\system32\agdvdjcy.dll (file missing)
      O2 - BHO: (no name) - {D67D7F6F-88F0-43B2-8D1D-BEF76D2B185c} - D:\WINDOWS\system32\agdvdjcy.dll (file missing)
      O2 - BHO: (no name) - {F742D88B-B22A-4715-B4FC-EF72B3729861} - D:\WINDOWS\system32\agdvdjcy.dll (file missing)
      O2 - BHO: (no name) - {FBB61A97-575F-4FD4-B4DF-6A1CAA4BD80a} - D:\WINDOWS\system32\agdvdjcy.dll (file missing)
      O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [SoundMAXPnP] D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
      O4 - HKLM\..\Run: [SoundMAX] "D:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] D:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [CTStartup] D:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
      O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
      O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [NeroFilterCheck] D:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [WindowsUpdate] rundll32.exe "D:\WINDOWS\system32\wcixdcus.dll",realset
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Synchronizer.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
      O4 - Global Startup: VIA RAID TOOL.lnk = D:\Program Files\VIA\RAID\raid_tool.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
      O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
      O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
      O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.exe
      O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - D:\WINDOWS\System32\dmadmin.exe
      O23 - Service: Journal des événements (Eventlog) - Unknown owner - D:\WINDOWS\system32\services.exe
      O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - D:\WINDOWS\system32\imapi.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - D:\WINDOWS\system32\mnmsrvc.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - D:\WINDOWS\system32\services.exe
      O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - D:\WINDOWS\system32\sessmgr.exe
      O23 - Service: Carte à puce (SCardSvr) - Unknown owner - D:\WINDOWS\System32\SCardSvr.exe
      O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - D:\WINDOWS\system32\smlogsvc.exe
      O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - D:\WINDOWS\System32\vssvc.exe
      O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - D:\Program Files\RealVNC\VNC4\WinVNC4.exe
      O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - D:\WINDOWS\system32\wbem\wmiapsrv.exe
      0
  4. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Oui, c'est noral, on n'y a pas encore touché, mais il y a une évolution :)

    fais ce qui est indiqué ici stp :

    virus methode preliminaire de desinfection version fr

    ++
    0
    1. Utilisateur anonyme
       
      Bonjour :)


      J'ai effectué les différentes étapes indiquées.

      Voici les différents rapports :


      ---------------------------------------------------------
      AVG Anti-Spyware - Rapport d'analyse
      ---------------------------------------------------------

      + Créé à: 01:18 2007-05-19

      + Résultat de l'analyse:



      D:\QooBox\Quarantine\D\WINDOWS\system32\aeiuvtnr.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\agdvdjcy.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\byjinjxi.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\cnxxulie.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\cpaevhfc.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\dwnxqccy.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\edipsvyw.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\fhbsnkqb.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\frcuqttc.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\gsdbcwhq.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\gtxabioi.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\hklghdms.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\ljiiwcah.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\pthuhtrf.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\pwideibi.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\rfsbmbex.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\rpeyulij.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\rsxsllvb.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\wwcaelsp.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\xhipvyaw.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\yfjwrrma.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\yisonqpx.dll.vir -> Adware.BHO : Ignoré.
      D:\QooBox\Quarantine\D\WINDOWS\system32\yskhaori.dll.vir -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095177.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095178.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095179.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095180.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095181.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095182.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095183.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095184.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095185.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095187.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095188.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095189.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095191.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095192.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095193.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095194.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095195.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095196.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095198.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095199.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095201.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095202.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP59\A0095203.dll -> Adware.BHO : Ignoré.
      D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP47\A0058030.exe -> Downloader.DNA : Nettoyé et sauvegardé (mise en quarantaine).
      D:\Documents and Settings\Papa\Local Settings\Temp\gphopulw.dll -> Logger.VBStat.h : Nettoyé et sauvegardé (mise en quarantaine).
      D:\Documents and Settings\Papa\Local Settings\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\Cache\BC62D28Cd01 -> Not-A-Virus.Downloader.Win32.WinFixer.q : Ignoré.
      :mozilla.178:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
      :mozilla.179:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
      :mozilla.251:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
      :mozilla.395:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
      :mozilla.7:D:\Documents and Settings\Cédric\Application Data\Mozilla\Firefox\Profiles\1645iwq3.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
      :mozilla.205:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.215:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.216:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.217:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.246:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.303:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.316:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.317:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.318:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.336:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.349:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.371:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.396:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.450:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.462:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.78:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.79:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.80:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.81:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.82:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@heavycom.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@hotelscom.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@mistergooddeal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.174:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
      :mozilla.175:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
      :mozilla.377:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
      :mozilla.378:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@2.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@3.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@4.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@stats.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@ads.addynamix[1].txt -> TrackingCookie.Addynamix : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@adengage[2].txt -> TrackingCookie.Adengage : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : Nettoyé.
      :mozilla.404:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Adobe : Nettoyé.
      :mozilla.320:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
      :mozilla.321:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
      :mozilla.322:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
      :mozilla.323:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
      :mozilla.129:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
      :mozilla.130:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
      :mozilla.321:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
      :mozilla.322:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
      :mozilla.51:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
      :mozilla.58:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
      :mozilla.139:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.140:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.141:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.142:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.27:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.28:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.29:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.30:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.94:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.95:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.96:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.97:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.374:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
      :mozilla.11:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
      :mozilla.134:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
      :mozilla.208:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@bfast[2].txt -> TrackingCookie.Bfast : Nettoyé.
      :mozilla.14:D:\Documents and Settings\Cédric\Application Data\Mozilla\Firefox\Profiles\1645iwq3.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
      :mozilla.26:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
      :mozilla.38:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
      :mozilla.78:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
      :mozilla.421:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.422:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.423:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.424:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.425:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.426:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.472:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.473:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.474:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.475:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.476:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.477:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@casalemedia[1].txt -> TrackingCookie.Casalemedia : Nettoyé.
      :mozilla.156:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Castup : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@clickbank[1].txt -> TrackingCookie.Clickbank : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@ad1.clickhype[1].txt -> TrackingCookie.Clickhype : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@cz11.clickzs[2].txt -> TrackingCookie.Clickzs : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@cz4.clickzs[2].txt -> TrackingCookie.Clickzs : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@cz6.clickzs[2].txt -> TrackingCookie.Clickzs : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@cz7.clickzs[2].txt -> TrackingCookie.Clickzs : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@vip2.clickzs[2].txt -> TrackingCookie.Clickzs : Nettoyé.
      :mozilla.483:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@com[1].txt -> TrackingCookie.Com : Nettoyé.
      :mozilla.325:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
      :mozilla.327:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
      :mozilla.328:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
      :mozilla.392:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
      :mozilla.393:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
      :mozilla.394:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
      :mozilla.415:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
      :mozilla.416:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
      :mozilla.417:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@commission-junction[2].txt -> TrackingCookie.Commission-junction : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : Nettoyé.
      :mozilla.392:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
      :mozilla.393:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
      :mozilla.394:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
      :mozilla.395:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyé.
      :mozilla.193:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.
      :mozilla.194:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.
      :mozilla.195:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.
      :mozilla.196:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.
      :mozilla.197:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.
      :mozilla.198:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.
      :mozilla.231:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Nettoyé.
      :mozilla.12:D:\Documents and Settings\Cédric\Application Data\Mozilla\Firefox\Profiles\1645iwq3.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
      :mozilla.16:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
      :mozilla.39:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
      :mozilla.59:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@enhance[1].txt -> TrackingCookie.Enhance : Nettoyé.
      :mozilla.305:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Esomniture : Nettoyé.
      :mozilla.158:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
      :mozilla.34:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
      :mozilla.44:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
      :mozilla.338:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Etracker : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@www.etracker[2].txt -> TrackingCookie.Etracker : Nettoyé.
      :mozilla.14:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
      :mozilla.15:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
      :mozilla.201:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
      :mozilla.463:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
      :mozilla.464:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@findwhat[1].txt -> TrackingCookie.Findwhat : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@goclick[2].txt -> TrackingCookie.Goclick : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@banner.goldenpalace[2].txt -> TrackingCookie.Goldenpalace : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@goldenpalace[2].txt -> TrackingCookie.Goldenpalace : Nettoyé.
      :mozilla.155:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
      :mozilla.183:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
      :mozilla.268:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
      :mozilla.272:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
      :mozilla.296:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
      :mozilla.362:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
      :mozilla.378:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
      :mozilla.397:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
      :mozilla.455:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
      :mozilla.314:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@ehg-hollywood.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@ehg-hollywoodmedia.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@ehg-hollywood.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@ehg-hollywoodmedia.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@ehg-quechoisir.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@ehg-hollywoodmedia.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter.hitslink[1].txt -> TrackingCookie.Hitslink : Nettoyé.
      :mozilla.103:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
      :mozilla.104:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
      :mozilla.171:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
      :mozilla.172:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
      :mozilla.22:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
      :mozilla.23:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@searchportal.information[2].txt -> TrackingCookie.Information : Nettoyé.
      :mozilla.294:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Linksynergy : Nettoyé.
      :mozilla.295:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Linksynergy : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@search.live[1].txt -> TrackingCookie.Live : Nettoyé.
      :mozilla.250:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
      :mozilla.251:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
      :mozilla.252:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
      :mozilla.273:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Masterstats : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@image.masterstats[1].txt -> TrackingCookie.Masterstats : Nettoyé.
      :mozilla.150:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
      :mozilla.151:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
      :mozilla.15:D:\Documents and Settings\Cédric\Application Data\Mozilla\Firefox\Profiles\1645iwq3.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
      :mozilla.410:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
      :mozilla.72:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@mediaplex[2].txt -> TrackingCookie.Mediaplex : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
      :mozilla.386:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Msn : Nettoyé.
      :mozilla.387:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Msn : Nettoyé.
      :mozilla.388:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Msn : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@ie.search.msn[1].txt -> TrackingCookie.Msn : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@ie.search.msn[2].txt -> TrackingCookie.Msn : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@ie.search.msn[1].txt -> TrackingCookie.Msn : Nettoyé.
      D:\Documents and Settings\Cédric\Cookies\cédric@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Nettoyé.
      :mozilla.296:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Onestat : Nettoyé.
      :mozilla.297:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Onestat : Nettoyé.
      :mozilla.302:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Onestat : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@stat.onestat[2].txt -> TrackingCookie.Onestat : Nettoyé.
      :mozilla.31:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
      :mozilla.37:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
      :mozilla.50:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
      :mozilla.52:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
      :mozilla.53:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@overture[2].txt -> TrackingCookie.Overture : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@overture[2].txt -> TrackingCookie.Overture : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@perf.overture[1].txt -> TrackingCookie.Overture : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@paycounter[2].txt -> TrackingCookie.Paycounter : Nettoyé.
      :mozilla.74:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Paypal : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@www.paypal[1].txt -> TrackingCookie.Paypal : Nettoyé.
      :mozilla.282:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
      :mozilla.283:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
      :mozilla.284:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
      :mozilla.289:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@hekate.porntrack[1].txt -> TrackingCookie.Porntrack : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@stats3.porntrack[2].txt -> TrackingCookie.Porntrack : Nettoyé.
      :mozilla.315:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Qksrv : Nettoyé.
      :mozilla.316:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Qksrv : Nettoyé.
      :mozilla.424:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Quarterserver : Nettoyé.
      :mozilla.290:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
      :mozilla.291:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
      :mozilla.184:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
      :mozilla.189:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
      :mozilla.10:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.11:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.12:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.14:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.15:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.16:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.17:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.18:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.19:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.20:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.21:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.22:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.249:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.250:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.251:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.252:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.253:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.254:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.255:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.260:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.403:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.404:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.405:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.406:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.407:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.408:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.409:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      :mozilla.6:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@revenue[2].txt -> TrackingCookie.Revenue : Nettoyé.
      :mozilla.202:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
      :mozilla.203:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
      :mozilla.244:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
      :mozilla.245:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
      :mozilla.246:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
      :mozilla.247:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
      :mozilla.248:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
      :mozilla.249:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
      :mozilla.156:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.157:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.158:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.159:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.160:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.161:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.163:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.164:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.165:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.166:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.167:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.168:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
      :mozilla.359:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.360:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.361:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.362:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.363:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.364:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.365:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.366:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.367:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.368:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.369:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      :mozilla.370:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@sexlist[2].txt -> TrackingCookie.Sexlist : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter1.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter10.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter11.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter12.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter13.sextracker[2].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter14.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter15.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter16.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter2.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter2.sextracker[2].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter3.sextracker[2].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter5.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter6.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter7.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter8.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@counter9.sextracker[2].txt -> TrackingCookie.Sextracker : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@sextracker[2].txt -> TrackingCookie.Sextracker : Nettoyé.
      :mozilla.178:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
      :mozilla.179:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
      :mozilla.276:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
      :mozilla.277:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
      :mozilla.31:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.32:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.33:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.42:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.43:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.44:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.60:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.65:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.66:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.67:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.69:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@specificclick[2].txt -> TrackingCookie.Specificclick : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@h.starware[2].txt -> TrackingCookie.Starware : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@try.starware[1].txt -> TrackingCookie.Starware : Nettoyé.
      :mozilla.12:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
      :mozilla.286:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
      :mozilla.287:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
      :mozilla.288:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
      :mozilla.289:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@toplist[1].txt -> TrackingCookie.Toplist : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@login.tracking101[2].txt -> TrackingCookie.Tracking101 : Nettoyé.
      :mozilla.170:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
      :mozilla.171:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
      :mozilla.181:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
      :mozilla.182:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
      :mozilla.183:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
      :mozilla.184:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
      :mozilla.432:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Trafic : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@trafic[1].txt -> TrackingCookie.Trafic : Nettoyé.
      :mozilla.281:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
      :mozilla.367:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
      :mozilla.115:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      :mozilla.116:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      :mozilla.117:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      :mozilla.124:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      :mozilla.125:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      :mozilla.126:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      :mozilla.68:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      :mozilla.69:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      :mozilla.70:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
      D:\Documents and Settings\Stéphanie\Cookies\stéphanie@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
      :mozilla.381:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
      :mozilla.456:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
      D:\Documents and Settings\Céline\Cookies\céline@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
      :mozilla.255:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
      :mozilla.294:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
      :mozilla.385:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@count.xhit[1].txt -> TrackingCookie.Xhit : Nettoyé.
      D:\Documents and Settings\Papa\Cookies\papa@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Nettoyé.
      :mozilla.319:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Yadro : Nettoyé.
      :mozilla.320:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Yadro : Nettoyé.
      0
      1. Utilisateur anonyme > Utilisateur anonyme
         
        Suite :

        D:\Documents and Settings\Céline\Cookies\céline@yadro[1].txt -> TrackingCookie.Yadro : Nettoyé.
        :mozilla.17:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
        :mozilla.18:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
        :mozilla.199:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
        :mozilla.19:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
        :mozilla.200:D:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\afyf42d0.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
        :mozilla.20:D:\Documents and Settings\Céline\Application Data\Mozilla\Firefox\Profiles\a3jhme2j.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
        :mozilla.257:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
        :mozilla.258:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
        D:\Documents and Settings\Papa\Cookies\papa@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
        :mozilla.97:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
        :mozilla.98:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
        :mozilla.99:D:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\caga1ol0.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
        D:\Documents and Settings\Papa\Cookies\papa@zedo[2].txt -> TrackingCookie.Zedo : Nettoyé.
        D:\Documents and Settings\Stéphanie\Cookies\stéphanie@zedo[2].txt -> TrackingCookie.Zedo : Nettoyé.
        D:\System Volume Information\_restore{C47B3953-726C-46EC-BA76-1D3111684655}\RP31\A0003482.exe -> Trojan.Obfuscated.fy : Nettoyé et sauvegardé (mise en quarantaine).


        Fin du rapport


        ------------------------------------------------------------



        Rapport de BitDefender : IE a planté à la fin du scan j'ai donc pas pu faire de rapport, manquait une vingatine de fichiers à scanner sur un disque amovible (disque virtuel par Deamon) , 87 fichiers infectés, 87 supprimés, ça a mis 1h50



        --------------------------------------------------------------


        HiJackThis


        Logfile of Trend Micro HijackThis v2.0.0 (BETA)
        Scan saved at 14:47, on 2007-05-20
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        Boot mode: Normal

        Running processes:
        D:\WINDOWS\System32\smss.exe
        D:\WINDOWS\system32\winlogon.exe
        D:\WINDOWS\system32\services.exe
        D:\WINDOWS\system32\lsass.exe
        D:\WINDOWS\system32\svchost.exe
        D:\WINDOWS\System32\svchost.exe
        D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        D:\Program Files\Alwil Software\Avast4\ashServ.exe
        D:\WINDOWS\system32\spoolsv.exe
        D:\WINDOWS\Explorer.EXE
        D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
        D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        D:\Program Files\Analog Devices\SoundMAX\Smax4.exe
        D:\WINDOWS\system32\CTHELPER.EXE
        D:\WINDOWS\system32\CTsvcCDA.exe
        D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
        D:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
        D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
        D:\WINDOWS\system32\RUNDLL32.EXE
        D:\Program Files\D-Tools\daemon.exe
        D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
        D:\WINDOWS\system32\ctfmon.exe
        D:\Program Files\MSN Messenger\msnmsgr.exe
        D:\WINDOWS\system32\nvsvc32.exe
        D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
        D:\WINDOWS\system32\svchost.exe
        D:\Program Files\RealVNC\VNC4\WinVNC4.exe
        D:\WINDOWS\system32\MsPMSPSv.exe
        D:\Program Files\VIA\RAID\raid_tool.exe
        D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        D:\WINDOWS\System32\svchost.exe
        D:\Program Files\MSN Messenger\usnsvc.exe
        D:\Program Files\Mozilla Firefox\firefox.exe
        D:\Documents and Settings\Cédric\Bureau\anti virus log\HiJackThis_v2.exe

        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
        O2 - BHO: (no name) - {55DB983C-BDBF-426f-86F0-187B02DDA39B} - (no file)
        O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: (no name) - {B729EB22-0D0F-4A8F-B0AE-FF935F77AF77} - (no file)
        O2 - BHO: (no name) - {CB19D0F7-829D-479E-8D76-0D607F5D4F96} - (no file)
        O2 - BHO: (no name) - {D67D7F6F-88F0-43B2-8D1D-BEF76D2B185c} - (no file)
        O2 - BHO: (no name) - {F742D88B-B22A-4715-B4FC-EF72B3729861} - (no file)
        O2 - BHO: (no name) - {FBB61A97-575F-4FD4-B4DF-6A1CAA4BD80a} - (no file)
        O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
        O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
        O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
        O4 - HKLM\..\Run: [SoundMAXPnP] D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
        O4 - HKLM\..\Run: [SoundMAX] "D:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
        O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
        O4 - HKLM\..\Run: [UpdReg] D:\WINDOWS\UpdReg.EXE
        O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe"
        O4 - HKLM\..\Run: [CTStartup] D:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
        O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
        O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
        O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [NeroFilterCheck] D:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
        O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033
        O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
        O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
        O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background
        O4 - Global Startup: Adobe Reader Synchronizer.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
        O4 - Global Startup: VIA RAID TOOL.lnk = D:\Program Files\VIA\RAID\raid_tool.exe
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
        O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
        O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
        O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
        O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
        O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.exe
        O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - D:\WINDOWS\System32\dmadmin.exe
        O23 - Service: Journal des événements (Eventlog) - Unknown owner - D:\WINDOWS\system32\services.exe
        O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - D:\WINDOWS\system32\imapi.exe
        O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
        O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - D:\WINDOWS\system32\mnmsrvc.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - D:\WINDOWS\system32\services.exe
        O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - D:\WINDOWS\system32\sessmgr.exe
        O23 - Service: Carte à puce (SCardSvr) - Unknown owner - D:\WINDOWS\System32\SCardSvr.exe
        O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
        O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - D:\WINDOWS\system32\smlogsvc.exe
        O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - D:\WINDOWS\System32\vssvc.exe
        O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - D:\Program Files\RealVNC\VNC4\WinVNC4.exe
        O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - D:\WINDOWS\system32\wbem\wmiapsrv.exe
        0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut

    ok,

    # Télécharge ceci: (merci a S!RI pour ce petit programme).

    http://siri.urz.free.fr/Fix/SmitfraudFix.zip

    Exécute le, Double click sur Smitfraudfix.cmd choisit l’option 1,
    voila a quoi cela ressemble : http://siri.urz.free.fr/Fix/SmitfraudFix.php
    il va générer un rapport : copie/colle le sur le poste stp.

    ++
    0