[Virus] photos.zip via msn+rapport Hijackthis
miln
Messages postés
7
Statut
Membre
-
rudyrital Messages postés 6233 Statut Membre -
rudyrital Messages postés 6233 Statut Membre -
Bonsoir !
il se trouve que je viens d'être infectée par le même virus, un fichier ZIP nommé "photos", qui, quand je clique dessus envois le fichier à tous mes contacts connectés... j'ai donc suivis les instructions du topic qui traitait de ce sujet et le rapport de Hijackthis me donne ceci :
Logfile of HijackThis v1.99.1
Scan saved at 20:21:53, on 01/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [NVRotateSysTray] rundll32.exe C:\WINDOWS\system32\nvsysrot.dll,Enable
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\msntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\fr-fr\msntabres.dll.mui/229?2237dd14d4c04700b56d3597d73310a8
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\fr-fr\msntabres.dll.mui/230?2237dd14d4c04700b56d3597d73310a8
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O21 - SSODL: syshosts - {F0BAC814-CFCD-45C3-8AC6-9547D147ED3F} - syshosts.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
Est ce que je peux/dois comme dready78, telecharger AVG Anti-Spyware et suivre la même démarche ? ou au contraire faire autre chose ?
merci beaucoup !
il se trouve que je viens d'être infectée par le même virus, un fichier ZIP nommé "photos", qui, quand je clique dessus envois le fichier à tous mes contacts connectés... j'ai donc suivis les instructions du topic qui traitait de ce sujet et le rapport de Hijackthis me donne ceci :
Logfile of HijackThis v1.99.1
Scan saved at 20:21:53, on 01/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [NVRotateSysTray] rundll32.exe C:\WINDOWS\system32\nvsysrot.dll,Enable
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\msntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\fr-fr\msntabres.dll.mui/229?2237dd14d4c04700b56d3597d73310a8
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\fr-fr\msntabres.dll.mui/230?2237dd14d4c04700b56d3597d73310a8
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O21 - SSODL: syshosts - {F0BAC814-CFCD-45C3-8AC6-9547D147ED3F} - syshosts.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
Est ce que je peux/dois comme dready78, telecharger AVG Anti-Spyware et suivre la même démarche ? ou au contraire faire autre chose ?
merci beaucoup !
A voir également:
- [Virus] photos.zip via msn+rapport Hijackthis
- Hijackthis - Télécharger - Antivirus & Antimalwares
- Virus mcafee - Accueil - Piratage
- Plan rapport de stage - Guide
- Telecharger msn - Télécharger - Messagerie
- Virus informatique - Guide
8 réponses
Salut,
oui fait comme l'autre et mets un lien vers ses posts,
voila apres reposte aussi un autre journal quant a fini.
a+
oui fait comme l'autre et mets un lien vers ses posts,
voila apres reposte aussi un autre journal quant a fini.
a+
relance hijackthis puis clic sur "do a system scan only"
apres le scan coche ces lignes et seulement celles ci !!
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
referme ton navigateur (internet explorer ) puis clic sur " fix check"
apres le scan coche ces lignes et seulement celles ci !!
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
referme ton navigateur (internet explorer ) puis clic sur " fix check"
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
* télécharge AVG Anti-Spyware
avg antispyware
http://www.infos-du-net.com/telecharger/Ewido-Security-Suite,0301-734.html
Tuto : http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
* tu l'installes
Démarrer AVG antispyware. Cliquer sur "mise à jour", cliquer sur le bouton "Commencer la mise à jour" et attendre la fin de cette mise à jour puis, fermer le programme.
si tu n'arrives pas à le mettre à jour prends ici les Mise à jour:
http://downloads.ewido.net/avgas-signatures-full-current.exe
Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).
relancer AVG AS et cliquer sur l'onglet "scanner" puis sur "Analyse complète du système".
Une fois le scan terminé, il t'affiche un rapport. Cliquer sur "configurer..." en bas a gauche et choisir "supprimer". Ensuite cliquer sur "Appliquer toutes les actions ", ca va supprimer toutes les infections détectées.
Ensuite cliquer sur "Enregistrer le rapport d'analyse" -> "enregistrer sous" et enregistrer le rapport où bon te semble, afin de me l'envoyer dans ta prochaine réponse.
Copie Et colle le rapport ici
avg antispyware
http://www.infos-du-net.com/telecharger/Ewido-Security-Suite,0301-734.html
Tuto : http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
* tu l'installes
Démarrer AVG antispyware. Cliquer sur "mise à jour", cliquer sur le bouton "Commencer la mise à jour" et attendre la fin de cette mise à jour puis, fermer le programme.
si tu n'arrives pas à le mettre à jour prends ici les Mise à jour:
http://downloads.ewido.net/avgas-signatures-full-current.exe
Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).
relancer AVG AS et cliquer sur l'onglet "scanner" puis sur "Analyse complète du système".
Une fois le scan terminé, il t'affiche un rapport. Cliquer sur "configurer..." en bas a gauche et choisir "supprimer". Ensuite cliquer sur "Appliquer toutes les actions ", ca va supprimer toutes les infections détectées.
Ensuite cliquer sur "Enregistrer le rapport d'analyse" -> "enregistrer sous" et enregistrer le rapport où bon te semble, afin de me l'envoyer dans ta prochaine réponse.
Copie Et colle le rapport ici
.... voilà ! l'analyse à prit du temps, mais voici le rapport :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 23:10:03 01/06/2007
+ Résultat de l'analyse:
C:\System Volume Information\_restore{626D9BD5-11D8-49A1-B657-D272D1F6275E}\RP92\A0015818.exe -> Downloader.DNA : Nettoyé.
:mozilla.575:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.576:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.577:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.578:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.579:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.105:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.106:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.107:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.213:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.499:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.467:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.468:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.263:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.264:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.265:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.266:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.267:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.268:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.269:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.495:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.497:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.317:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.318:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.319:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.320:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.23:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.92:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.660:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.545:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.546:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.547:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.66:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\XU Milene\Cookies\xu milene@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.235:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.494:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.496:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.498:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.441:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.429:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.640:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.655:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.377:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.378:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.380:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.616:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.554:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Hitslink : Nettoyé.
:mozilla.155:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.156:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.314:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.241:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.652:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.161:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Paypal : Nettoyé.
:mozilla.511:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.512:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.513:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.514:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.658:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.659:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.447:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.450:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.451:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.452:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.388:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.389:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.390:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.391:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.392:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.393:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.40:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.41:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.45:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.46:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\XU Milene\Cookies\xu milene@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.137:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.143:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.144:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.145:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.138:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.139:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.140:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.141:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.142:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.224:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.226:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.227:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.228:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.20:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.21:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.22:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.693:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.272:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.273:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.274:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.275:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.435:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.436:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.440:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
Fin du rapport
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 23:10:03 01/06/2007
+ Résultat de l'analyse:
C:\System Volume Information\_restore{626D9BD5-11D8-49A1-B657-D272D1F6275E}\RP92\A0015818.exe -> Downloader.DNA : Nettoyé.
:mozilla.575:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.576:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.577:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.578:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.579:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.105:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.106:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.107:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.213:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.499:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.467:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.468:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.263:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.264:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.265:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.266:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.267:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.268:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.269:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.495:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.497:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.317:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.318:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.319:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.320:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.23:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.92:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.660:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.545:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.546:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.547:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.66:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\XU Milene\Cookies\xu milene@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.235:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.494:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.496:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.498:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.441:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.429:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.640:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.655:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.377:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.378:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.380:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.616:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.554:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Hitslink : Nettoyé.
:mozilla.155:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.156:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.314:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.241:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.652:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.161:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Paypal : Nettoyé.
:mozilla.511:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.512:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.513:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.514:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.658:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.659:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.447:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.450:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.451:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.452:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.388:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.389:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.390:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.391:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.392:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.393:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.40:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.41:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.45:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.46:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\XU Milene\Cookies\xu milene@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.137:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.143:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.144:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.145:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.138:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.139:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.140:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.141:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.142:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.224:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.226:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.227:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.228:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.20:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.21:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.22:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.693:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.272:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.273:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.274:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.275:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.435:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.436:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.440:C:\Documents and Settings\XU Milene\Application Data\Mozilla\Firefox\Profiles\r7x3w6p9.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
Fin du rapport
j'en ai profiter aussi pour refaire une analyse avec Hijackthis :
Logfile of HijackThis v1.99.1
Scan saved at 23:41:48, on 01/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [NVRotateSysTray] rundll32.exe C:\WINDOWS\system32\nvsysrot.dll,Enable
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\msntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\fr-fr\msntabres.dll.mui/229?2237dd14d4c04700b56d3597d73310a8
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\fr-fr\msntabres.dll.mui/230?2237dd14d4c04700b56d3597d73310a8
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
Logfile of HijackThis v1.99.1
Scan saved at 23:41:48, on 01/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [NVRotateSysTray] rundll32.exe C:\WINDOWS\system32\nvsysrot.dll,Enable
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\msntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\fr-fr\msntabres.dll.mui/229?2237dd14d4c04700b56d3597d73310a8
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\fr-fr\msntabres.dll.mui/230?2237dd14d4c04700b56d3597d73310a8
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
fait scanner ton pc par un ou plusieurs antivirus en ligne:
Quelques AV en lignes:
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
http://www.bitdefender.fr/scan_fr/scan8/ie.html
https://www.pandasecurity.com/?ref=www.pandasoftware.com/activescan/fr/activescan_principal.htm
https://www.trendmicro.com/en_us/forHome/products/housecall.html
si l'antivirus ne peut pas supprimer:
- noter le chemin et le nom des fichiers infectés (ou encore mieux, le rapport du scan) et poster le resultat du scan sur le forum.
Quelques AV en lignes:
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
http://www.bitdefender.fr/scan_fr/scan8/ie.html
https://www.pandasecurity.com/?ref=www.pandasoftware.com/activescan/fr/activescan_principal.htm
https://www.trendmicro.com/en_us/forHome/products/housecall.html
si l'antivirus ne peut pas supprimer:
- noter le chemin et le nom des fichiers infectés (ou encore mieux, le rapport du scan) et poster le resultat du scan sur le forum.
