Infecté par infostealer
Fermé
**Fleurita**
-
28 juin 2007 à 11:42
salwa5 Messages postés 7452 Date d'inscription jeudi 30 novembre 2006 Statut Contributeur Dernière intervention 18 août 2012 - 1 juil. 2007 à 18:13
salwa5 Messages postés 7452 Date d'inscription jeudi 30 novembre 2006 Statut Contributeur Dernière intervention 18 août 2012 - 1 juil. 2007 à 18:13
A voir également:
- Infecté par infostealer
- L'ordinateur d'arthur a été infecté par un virus répertorié récemment. son anti-virus ne l'a pas détecté. qu'a-t-il pu se passer ? ✓ - Forum Antivirus
- L'ordinateur de mustapha a été infecté par un virus répertorié récemment. son anti-virus ne l'a pas détecté. qu'a-t-il pu se passer ? - Forum Virus
- L'ordinateur de samantha a été infecté par un virus répertorié récemment. son anti-virus ne l'a pas détecté. qu'a-t-il pu se passer ? - Forum Virus
- L'ordinateur de simon a été infecté par un virus répertorié récemment. son anti-virus ne l'a pas détecté. qu'a-t-il pu se passer ? - Forum Jeux vidéo
- Mustapha - Forum Windows
17 réponses
salwa5
Messages postés
7452
Date d'inscription
jeudi 30 novembre 2006
Statut
Contributeur
Dernière intervention
18 août 2012
1 632
28 juin 2007 à 16:37
28 juin 2007 à 16:37
bonjour
1/Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
http://www.atribune.org/ccount/click.php?id=4
>Double-clique VundoFix.exe afin de le lancer.
>Clique sur le bouton Scan for Vundo.
>Lorsque le scan est complété, clique sur le bouton Remove Vundo.
>Une invite te demandera si tu veux supprimer les fichiers, clique YES
>Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
>Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown"); clique OK
>Démarre ton PC à nouveau.
>Copie/colle le contenu du rapport situé dans C:\vundofix.txt dans ta prochaine réponse.
Télécharge VirtumundoBegone sur le bureau:
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe"
target=_blank
>http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe
Double clique ensuite sur VirtumundoBeGone.exe et suis les
instructions.
Une fois terminé, redémarre et poste le rapport VBG.TXT créé sur le
bureau dans ta prochaine réponse avec un nouveau rapport HijackThis.
Ne t'inquiète pas si tu vois un message Ecran bleu "Erreur fatale",
c'est normal et attendu.
a+++
1/Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
http://www.atribune.org/ccount/click.php?id=4
>Double-clique VundoFix.exe afin de le lancer.
>Clique sur le bouton Scan for Vundo.
>Lorsque le scan est complété, clique sur le bouton Remove Vundo.
>Une invite te demandera si tu veux supprimer les fichiers, clique YES
>Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
>Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown"); clique OK
>Démarre ton PC à nouveau.
>Copie/colle le contenu du rapport situé dans C:\vundofix.txt dans ta prochaine réponse.
Télécharge VirtumundoBegone sur le bureau:
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe"
target=_blank
>http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe
Double clique ensuite sur VirtumundoBeGone.exe et suis les
instructions.
Une fois terminé, redémarre et poste le rapport VBG.TXT créé sur le
bureau dans ta prochaine réponse avec un nouveau rapport HijackThis.
Ne t'inquiète pas si tu vois un message Ecran bleu "Erreur fatale",
c'est normal et attendu.
a+++
merci pour ton aide!alors comme convenu je t'envoie les 3 rapports,celui de VUNDOFIX,de VIRTUALMUNDOBEGONE et enfin le nouveau rapport de HijackThis:
1/VUNDOFIX:
VundoFix V6.5.4
Checking Java version...
Java version is 1.4.2.5
Old versions of java are exploitable and should be removed.
Java version is 1.5.0.3
Old versions of java are exploitable and should be removed.
Scan started at 14:39:33 29/06/2007
Listing files found while scanning....
C:\windows\system32\almavxvf.exe
C:\windows\system32\axdnbaky.dll
C:\windows\system32\bmddlbrp.exe
C:\windows\system32\bugpyegs.exe
C:\windows\system32\cvmidguk.dll
C:\windows\system32\dcniphut.ini
C:\windows\system32\difibenx.dll
C:\windows\system32\dxdmpvle.exe
C:\windows\system32\ehejwfdw.ini
C:\windows\system32\ejtcwgof.exe
C:\windows\system32\emcvlxpj.exe
C:\windows\system32\epmrwguv.dll
C:\windows\system32\fugrmqnu.ini
C:\windows\system32\gcbxpalc.exe
C:\windows\system32\gcwndbqo.dll
C:\WINDOWS\system32\gebxw.dll
C:\windows\system32\hklmduyd.exe
C:\WINDOWS\system32\hpxsaugg.dll
C:\windows\system32\iglunkgq.ini
C:\WINDOWS\system32\iifgedd.dll
C:\windows\system32\iraurdit.ini
C:\windows\system32\isnxxgfy.exe
C:\windows\system32\kpdxlyok.exe
C:\windows\system32\kriqffno.dll
C:\windows\system32\kugdimvc.ini
C:\windows\system32\lbotifcs.ini
C:\windows\system32\ldypepqu.ini
C:\windows\system32\lnemodyo.exe
C:\windows\system32\lnnpo.ini
C:\windows\system32\lrbnloqa.exe
C:\windows\system32\maubgcus.dll
C:\windows\system32\mkhgabwm.exe
C:\WINDOWS\system32\mmwmktiq.dll
C:\windows\system32\mynmdasm.exe
C:\windows\system32\npklasqh.exe
C:\windows\system32\nqkajnki.dll
C:\windows\system32\onffqirk.ini
C:\windows\system32\opnnl.dll
C:\windows\system32\otssodvr.exe
C:\windows\system32\oxmmkgnq.exe
C:\windows\system32\oydlopcw.dll
C:\windows\system32\pettjhsj.exe
C:\windows\system32\ppdtkcvt.ini
C:\windows\system32\qgknulgi.dll
C:\WINDOWS\system32\scfitobl.dll
C:\windows\system32\sjkidcuv.exe
C:\windows\system32\stiavwef.exe
C:\windows\system32\sucgbuam.ini
C:\windows\system32\tidruari.dll
C:\windows\system32\tuhpincd.dll
C:\windows\system32\tvcktdpp.dll
C:\windows\system32\unqmrguf.dll
C:\windows\system32\uqpepydl.dll
C:\windows\system32\utmoggvu.exe
C:\windows\system32\vflqnmsw.exe
C:\windows\system32\vugwrmpe.ini
C:\windows\system32\wdfwjehe.dll
C:\windows\system32\wmfjvfyk.exe
C:\WINDOWS\system32\wxbeg.bak1
C:\windows\system32\wxbeg.bak2
C:\windows\system32\wxbeg.ini
C:\windows\system32\wxbeg.ini2
C:\windows\system32\wxbeg.tmp
C:\windows\system32\xnebifid.ini
C:\windows\system32\ykabndxa.ini
Beginning removal...
Attempting to delete C:\windows\system32\almavxvf.exe
C:\windows\system32\almavxvf.exe Has been deleted!
Attempting to delete C:\windows\system32\axdnbaky.dll
C:\windows\system32\axdnbaky.dll Has been deleted!
Attempting to delete C:\windows\system32\bmddlbrp.exe
C:\windows\system32\bmddlbrp.exe Has been deleted!
Attempting to delete C:\windows\system32\bugpyegs.exe
C:\windows\system32\bugpyegs.exe Has been deleted!
Attempting to delete C:\windows\system32\cvmidguk.dll
C:\windows\system32\cvmidguk.dll Has been deleted!
Attempting to delete C:\windows\system32\dcniphut.ini
C:\windows\system32\dcniphut.ini Has been deleted!
Attempting to delete C:\windows\system32\difibenx.dll
C:\windows\system32\difibenx.dll Has been deleted!
Attempting to delete C:\windows\system32\dxdmpvle.exe
C:\windows\system32\dxdmpvle.exe Has been deleted!
Attempting to delete C:\windows\system32\ehejwfdw.ini
C:\windows\system32\ehejwfdw.ini Has been deleted!
Attempting to delete C:\windows\system32\ejtcwgof.exe
C:\windows\system32\ejtcwgof.exe Has been deleted!
Attempting to delete C:\windows\system32\emcvlxpj.exe
C:\windows\system32\emcvlxpj.exe Has been deleted!
Attempting to delete C:\windows\system32\epmrwguv.dll
C:\windows\system32\epmrwguv.dll Has been deleted!
Attempting to delete C:\windows\system32\fugrmqnu.ini
C:\windows\system32\fugrmqnu.ini Has been deleted!
Attempting to delete C:\windows\system32\gcbxpalc.exe
C:\windows\system32\gcbxpalc.exe Has been deleted!
Attempting to delete C:\windows\system32\gcwndbqo.dll
C:\windows\system32\gcwndbqo.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\gebxw.dll
C:\WINDOWS\system32\gebxw.dll Has been deleted!
Attempting to delete C:\windows\system32\hklmduyd.exe
C:\windows\system32\hklmduyd.exe Has been deleted!
Attempting to delete C:\WINDOWS\system32\hpxsaugg.dll
C:\WINDOWS\system32\hpxsaugg.dll Has been deleted!
Attempting to delete C:\windows\system32\iglunkgq.ini
C:\windows\system32\iglunkgq.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\iifgedd.dll
C:\WINDOWS\system32\iifgedd.dll Could not be deleted.
Attempting to delete C:\windows\system32\iraurdit.ini
C:\windows\system32\iraurdit.ini Has been deleted!
Attempting to delete C:\windows\system32\isnxxgfy.exe
C:\windows\system32\isnxxgfy.exe Has been deleted!
Attempting to delete C:\windows\system32\kpdxlyok.exe
C:\windows\system32\kpdxlyok.exe Has been deleted!
Attempting to delete C:\windows\system32\kriqffno.dll
C:\windows\system32\kriqffno.dll Has been deleted!
Attempting to delete C:\windows\system32\kugdimvc.ini
C:\windows\system32\kugdimvc.ini Has been deleted!
Attempting to delete C:\windows\system32\lbotifcs.ini
C:\windows\system32\lbotifcs.ini Has been deleted!
Attempting to delete C:\windows\system32\ldypepqu.ini
C:\windows\system32\ldypepqu.ini Has been deleted!
Attempting to delete C:\windows\system32\lnemodyo.exe
C:\windows\system32\lnemodyo.exe Has been deleted!
Attempting to delete C:\windows\system32\lnnpo.ini
C:\windows\system32\lnnpo.ini Has been deleted!
Attempting to delete C:\windows\system32\lrbnloqa.exe
C:\windows\system32\lrbnloqa.exe Has been deleted!
Attempting to delete C:\windows\system32\maubgcus.dll
C:\windows\system32\maubgcus.dll Has been deleted!
Attempting to delete C:\windows\system32\mkhgabwm.exe
C:\windows\system32\mkhgabwm.exe Has been deleted!
Attempting to delete C:\WINDOWS\system32\mmwmktiq.dll
C:\WINDOWS\system32\mmwmktiq.dll Has been deleted!
Attempting to delete C:\windows\system32\mynmdasm.exe
C:\windows\system32\mynmdasm.exe Has been deleted!
Attempting to delete C:\windows\system32\npklasqh.exe
C:\windows\system32\npklasqh.exe Has been deleted!
Attempting to delete C:\windows\system32\nqkajnki.dll
C:\windows\system32\nqkajnki.dll Has been deleted!
Attempting to delete C:\windows\system32\onffqirk.ini
C:\windows\system32\onffqirk.ini Has been deleted!
Attempting to delete C:\windows\system32\opnnl.dll
C:\windows\system32\opnnl.dll Has been deleted!
Attempting to delete C:\windows\system32\otssodvr.exe
C:\windows\system32\otssodvr.exe Has been deleted!
Attempting to delete C:\windows\system32\oxmmkgnq.exe
C:\windows\system32\oxmmkgnq.exe Has been deleted!
Attempting to delete C:\windows\system32\oydlopcw.dll
C:\windows\system32\oydlopcw.dll Has been deleted!
Attempting to delete C:\windows\system32\pettjhsj.exe
C:\windows\system32\pettjhsj.exe Has been deleted!
Attempting to delete C:\windows\system32\ppdtkcvt.ini
C:\windows\system32\ppdtkcvt.ini Has been deleted!
Attempting to delete C:\windows\system32\qgknulgi.dll
C:\windows\system32\qgknulgi.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\scfitobl.dll
C:\WINDOWS\system32\scfitobl.dll Could not be deleted.
Attempting to delete C:\windows\system32\sjkidcuv.exe
C:\windows\system32\sjkidcuv.exe Has been deleted!
Attempting to delete C:\windows\system32\stiavwef.exe
C:\windows\system32\stiavwef.exe Has been deleted!
Attempting to delete C:\windows\system32\sucgbuam.ini
C:\windows\system32\sucgbuam.ini Has been deleted!
Attempting to delete C:\windows\system32\tidruari.dll
C:\windows\system32\tidruari.dll Has been deleted!
Attempting to delete C:\windows\system32\tuhpincd.dll
C:\windows\system32\tuhpincd.dll Has been deleted!
Attempting to delete C:\windows\system32\tvcktdpp.dll
C:\windows\system32\tvcktdpp.dll Has been deleted!
Attempting to delete C:\windows\system32\unqmrguf.dll
C:\windows\system32\unqmrguf.dll Has been deleted!
Attempting to delete C:\windows\system32\uqpepydl.dll
C:\windows\system32\uqpepydl.dll Could not be deleted.
Attempting to delete C:\windows\system32\utmoggvu.exe
C:\windows\system32\utmoggvu.exe Has been deleted!
Attempting to delete C:\windows\system32\vflqnmsw.exe
C:\windows\system32\vflqnmsw.exe Has been deleted!
Attempting to delete C:\windows\system32\vugwrmpe.ini
C:\windows\system32\vugwrmpe.ini Has been deleted!
Attempting to delete C:\windows\system32\wdfwjehe.dll
C:\windows\system32\wdfwjehe.dll Has been deleted!
Attempting to delete C:\windows\system32\wmfjvfyk.exe
C:\windows\system32\wmfjvfyk.exe Has been deleted!
Attempting to delete C:\WINDOWS\system32\wxbeg.bak1
C:\WINDOWS\system32\wxbeg.bak1 Has been deleted!
Attempting to delete C:\windows\system32\wxbeg.bak2
C:\windows\system32\wxbeg.bak2 Has been deleted!
Attempting to delete C:\windows\system32\wxbeg.ini
C:\windows\system32\wxbeg.ini Has been deleted!
Attempting to delete C:\windows\system32\wxbeg.ini2
C:\windows\system32\wxbeg.ini2 Has been deleted!
Attempting to delete C:\windows\system32\wxbeg.tmp
C:\windows\system32\wxbeg.tmp Has been deleted!
Attempting to delete C:\windows\system32\xnebifid.ini
C:\windows\system32\xnebifid.ini Has been deleted!
Attempting to delete C:\windows\system32\ykabndxa.ini
C:\windows\system32\ykabndxa.ini Has been deleted!
Performing Repairs to the registry.
Done!
2/VIRTUALMUNDOBEGONE
[06/29/2007, 14:54:24] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\SIMO\Bureau\VirtumundoBeGone.exe" )
[06/29/2007, 14:54:34] - Detected System Information:
[06/29/2007, 14:54:34] - Windows Version: 5.1.2600, Service Pack 2
[06/29/2007, 14:54:34] - Current Username: SIMO (Admin)
[06/29/2007, 14:54:34] - Windows is in NORMAL mode.
[06/29/2007, 14:54:34] - Searching for Browser Helper Objects:
[06/29/2007, 14:54:34] - BHO 1: {00000010-6F7D-442C-93E3-4A4827C2E4C8} (BHObj Class)
[06/29/2007, 14:54:34] - BHO 2: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper)
[06/29/2007, 14:54:34] - BHO 3: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[06/29/2007, 14:54:34] - BHO 4: {2843DAC1-05EF-11D2-95BA-0060083493D6} (DgnWebIE)
[06/29/2007, 14:54:34] - BHO 5: {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} (Need2Find Bar BHO)
[06/29/2007, 14:54:34] - BHO 6: {4E7BD74F-2B8D-469E-90F0-F66AB581A933} ()
[06/29/2007, 14:54:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:54:34] - No filename found. Continuing.
[06/29/2007, 14:54:34] - BHO 7: {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} (PaltalkWebLogin)
[06/29/2007, 14:54:34] - BHO 8: {59879FA4-4790-461c-A1CC-4EC4DE4CA483} (RXResultTracker Class)
[06/29/2007, 14:54:34] - BHO 9: {6099B953-DB0E-4917-AA05-222B288C15F5} ()
[06/29/2007, 14:54:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:54:34] - Checking for HKLM\...\Winlogon\Notify\nqkajnki
[06/29/2007, 14:54:34] - Key not found: HKLM\...\Winlogon\Notify\nqkajnki, continuing.
[06/29/2007, 14:54:34] - BHO 10: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
[06/29/2007, 14:54:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:54:34] - No filename found. Continuing.
[06/29/2007, 14:54:34] - BHO 11: {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} (BHObj Class)
[06/29/2007, 14:54:34] - BHO 12: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[06/29/2007, 14:54:34] - BHO 13: {A3FDD654-A057-4971-9844-4ED8E67DBBB8} (BAHelper Class)
[06/29/2007, 14:54:34] - BHO 14: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[06/29/2007, 14:54:34] - BHO 15: {BDF3E430-B101-42AD-A544-FADC6B084872} (CNavExtBho Class)
[06/29/2007, 14:54:34] - BHO 16: {DB89B365-3E56-4306-8B67-23A853FBB26E} ()
[06/29/2007, 14:54:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:54:34] - Checking for HKLM\...\Winlogon\Notify\gebxw
[06/29/2007, 14:54:34] - Key not found: HKLM\...\Winlogon\Notify\gebxw, continuing.
[06/29/2007, 14:54:34] - BHO 17: {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} ()
[06/29/2007, 14:54:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:54:34] - Checking for HKLM\...\Winlogon\Notify\nqkajnki
[06/29/2007, 14:54:34] - Key not found: HKLM\...\Winlogon\Notify\nqkajnki, continuing.
[06/29/2007, 14:54:34] - Finished Searching Browser Helper Objects
[06/29/2007, 14:54:34] - Finishing up...
[06/29/2007, 14:54:34] - Nothing found! Exiting...
[06/29/2007, 14:56:12] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\SIMO\Local Settings\Temporary Internet Files\Content.IE5\1CLG1FEI\VirtumundoBeGone[1].exe" )
[06/29/2007, 14:56:19] - Detected System Information:
[06/29/2007, 14:56:19] - Windows Version: 5.1.2600, Service Pack 2
[06/29/2007, 14:56:19] - Current Username: SIMO (Admin)
[06/29/2007, 14:56:19] - Windows is in NORMAL mode.
[06/29/2007, 14:56:19] - Searching for Browser Helper Objects:
[06/29/2007, 14:56:19] - BHO 1: {00000010-6F7D-442C-93E3-4A4827C2E4C8} (BHObj Class)
[06/29/2007, 14:56:19] - BHO 2: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper)
[06/29/2007, 14:56:19] - BHO 3: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[06/29/2007, 14:56:19] - BHO 4: {2843DAC1-05EF-11D2-95BA-0060083493D6} (DgnWebIE)
[06/29/2007, 14:56:19] - BHO 5: {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} (Need2Find Bar BHO)
[06/29/2007, 14:56:19] - BHO 6: {4E7BD74F-2B8D-469E-90F0-F66AB581A933} ()
[06/29/2007, 14:56:19] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:56:19] - No filename found. Continuing.
[06/29/2007, 14:56:19] - BHO 7: {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} (PaltalkWebLogin)
[06/29/2007, 14:56:19] - BHO 8: {59879FA4-4790-461c-A1CC-4EC4DE4CA483} (RXResultTracker Class)
[06/29/2007, 14:56:19] - BHO 9: {6099B953-DB0E-4917-AA05-222B288C15F5} ()
[06/29/2007, 14:56:19] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:56:19] - Checking for HKLM\...\Winlogon\Notify\nqkajnki
[06/29/2007, 14:56:19] - Key not found: HKLM\...\Winlogon\Notify\nqkajnki, continuing.
[06/29/2007, 14:56:19] - BHO 10: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
[06/29/2007, 14:56:19] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:56:19] - No filename found. Continuing.
[06/29/2007, 14:56:19] - BHO 11: {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} (BHObj Class)
[06/29/2007, 14:56:19] - BHO 12: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[06/29/2007, 14:56:19] - BHO 13: {A3FDD654-A057-4971-9844-4ED8E67DBBB8} (BAHelper Class)
[06/29/2007, 14:56:19] - BHO 14: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[06/29/2007, 14:56:19] - BHO 15: {BDF3E430-B101-42AD-A544-FADC6B084872} (CNavExtBho Class)
[06/29/2007, 14:56:19] - BHO 16: {DB89B365-3E56-4306-8B67-23A853FBB26E} ()
[06/29/2007, 14:56:19] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:56:19] - Checking for HKLM\...\Winlogon\Notify\gebxw
[06/29/2007, 14:56:19] - Key not found: HKLM\...\Winlogon\Notify\gebxw, continuing.
[06/29/2007, 14:56:19] - BHO 17: {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} ()
[06/29/2007, 14:56:19] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:56:19] - Checking for HKLM\...\Winlogon\Notify\nqkajnki
[06/29/2007, 14:56:19] - Key not found: HKLM\...\Winlogon\Notify\nqkajnki, continuing.
[06/29/2007, 14:56:19] - Finished Searching Browser Helper Objects
[06/29/2007, 14:56:19] - Finishing up...
[06/29/2007, 14:56:19] - Nothing found! Exiting...
3/ NOUVEAU RAPPORT HIJACKTHIS
Logfile of HijackThis v1.99.1
Scan saved at 15:31:03, on 29/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\SurfAccuracy\SAcc.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\dtkjxqo.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\windows\system32\drivers\uzcx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\SIMO\Bureau\scanner.exe\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q304&bd=pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - (no file)
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\PROGRA~1\RXTOOL~1\sfcont.dll (file missing)
O2 - BHO: (no name) - {6099B953-DB0E-4917-AA05-222B288C15F5} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Program Files\SideFind\sfbho.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {DB89B365-3E56-4306-8B67-23A853FBB26E} - C:\WINDOWS\system32\gebxw.dll (file missing)
O2 - BHO: (no name) - {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [CICache] CICache.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [fgCJa] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [Irnewh] C:\Program Files\Wzejn\Odbivqr.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (VC0305)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ReJf5vH] C:\WINDOWS\dtkjxqo.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [qikqvq] c:\windows\system32\qikqvq.exe qikqvq
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [L07FXLRD_16378120] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2007 - Études DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsvqg.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
1/VUNDOFIX:
VundoFix V6.5.4
Checking Java version...
Java version is 1.4.2.5
Old versions of java are exploitable and should be removed.
Java version is 1.5.0.3
Old versions of java are exploitable and should be removed.
Scan started at 14:39:33 29/06/2007
Listing files found while scanning....
C:\windows\system32\almavxvf.exe
C:\windows\system32\axdnbaky.dll
C:\windows\system32\bmddlbrp.exe
C:\windows\system32\bugpyegs.exe
C:\windows\system32\cvmidguk.dll
C:\windows\system32\dcniphut.ini
C:\windows\system32\difibenx.dll
C:\windows\system32\dxdmpvle.exe
C:\windows\system32\ehejwfdw.ini
C:\windows\system32\ejtcwgof.exe
C:\windows\system32\emcvlxpj.exe
C:\windows\system32\epmrwguv.dll
C:\windows\system32\fugrmqnu.ini
C:\windows\system32\gcbxpalc.exe
C:\windows\system32\gcwndbqo.dll
C:\WINDOWS\system32\gebxw.dll
C:\windows\system32\hklmduyd.exe
C:\WINDOWS\system32\hpxsaugg.dll
C:\windows\system32\iglunkgq.ini
C:\WINDOWS\system32\iifgedd.dll
C:\windows\system32\iraurdit.ini
C:\windows\system32\isnxxgfy.exe
C:\windows\system32\kpdxlyok.exe
C:\windows\system32\kriqffno.dll
C:\windows\system32\kugdimvc.ini
C:\windows\system32\lbotifcs.ini
C:\windows\system32\ldypepqu.ini
C:\windows\system32\lnemodyo.exe
C:\windows\system32\lnnpo.ini
C:\windows\system32\lrbnloqa.exe
C:\windows\system32\maubgcus.dll
C:\windows\system32\mkhgabwm.exe
C:\WINDOWS\system32\mmwmktiq.dll
C:\windows\system32\mynmdasm.exe
C:\windows\system32\npklasqh.exe
C:\windows\system32\nqkajnki.dll
C:\windows\system32\onffqirk.ini
C:\windows\system32\opnnl.dll
C:\windows\system32\otssodvr.exe
C:\windows\system32\oxmmkgnq.exe
C:\windows\system32\oydlopcw.dll
C:\windows\system32\pettjhsj.exe
C:\windows\system32\ppdtkcvt.ini
C:\windows\system32\qgknulgi.dll
C:\WINDOWS\system32\scfitobl.dll
C:\windows\system32\sjkidcuv.exe
C:\windows\system32\stiavwef.exe
C:\windows\system32\sucgbuam.ini
C:\windows\system32\tidruari.dll
C:\windows\system32\tuhpincd.dll
C:\windows\system32\tvcktdpp.dll
C:\windows\system32\unqmrguf.dll
C:\windows\system32\uqpepydl.dll
C:\windows\system32\utmoggvu.exe
C:\windows\system32\vflqnmsw.exe
C:\windows\system32\vugwrmpe.ini
C:\windows\system32\wdfwjehe.dll
C:\windows\system32\wmfjvfyk.exe
C:\WINDOWS\system32\wxbeg.bak1
C:\windows\system32\wxbeg.bak2
C:\windows\system32\wxbeg.ini
C:\windows\system32\wxbeg.ini2
C:\windows\system32\wxbeg.tmp
C:\windows\system32\xnebifid.ini
C:\windows\system32\ykabndxa.ini
Beginning removal...
Attempting to delete C:\windows\system32\almavxvf.exe
C:\windows\system32\almavxvf.exe Has been deleted!
Attempting to delete C:\windows\system32\axdnbaky.dll
C:\windows\system32\axdnbaky.dll Has been deleted!
Attempting to delete C:\windows\system32\bmddlbrp.exe
C:\windows\system32\bmddlbrp.exe Has been deleted!
Attempting to delete C:\windows\system32\bugpyegs.exe
C:\windows\system32\bugpyegs.exe Has been deleted!
Attempting to delete C:\windows\system32\cvmidguk.dll
C:\windows\system32\cvmidguk.dll Has been deleted!
Attempting to delete C:\windows\system32\dcniphut.ini
C:\windows\system32\dcniphut.ini Has been deleted!
Attempting to delete C:\windows\system32\difibenx.dll
C:\windows\system32\difibenx.dll Has been deleted!
Attempting to delete C:\windows\system32\dxdmpvle.exe
C:\windows\system32\dxdmpvle.exe Has been deleted!
Attempting to delete C:\windows\system32\ehejwfdw.ini
C:\windows\system32\ehejwfdw.ini Has been deleted!
Attempting to delete C:\windows\system32\ejtcwgof.exe
C:\windows\system32\ejtcwgof.exe Has been deleted!
Attempting to delete C:\windows\system32\emcvlxpj.exe
C:\windows\system32\emcvlxpj.exe Has been deleted!
Attempting to delete C:\windows\system32\epmrwguv.dll
C:\windows\system32\epmrwguv.dll Has been deleted!
Attempting to delete C:\windows\system32\fugrmqnu.ini
C:\windows\system32\fugrmqnu.ini Has been deleted!
Attempting to delete C:\windows\system32\gcbxpalc.exe
C:\windows\system32\gcbxpalc.exe Has been deleted!
Attempting to delete C:\windows\system32\gcwndbqo.dll
C:\windows\system32\gcwndbqo.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\gebxw.dll
C:\WINDOWS\system32\gebxw.dll Has been deleted!
Attempting to delete C:\windows\system32\hklmduyd.exe
C:\windows\system32\hklmduyd.exe Has been deleted!
Attempting to delete C:\WINDOWS\system32\hpxsaugg.dll
C:\WINDOWS\system32\hpxsaugg.dll Has been deleted!
Attempting to delete C:\windows\system32\iglunkgq.ini
C:\windows\system32\iglunkgq.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\iifgedd.dll
C:\WINDOWS\system32\iifgedd.dll Could not be deleted.
Attempting to delete C:\windows\system32\iraurdit.ini
C:\windows\system32\iraurdit.ini Has been deleted!
Attempting to delete C:\windows\system32\isnxxgfy.exe
C:\windows\system32\isnxxgfy.exe Has been deleted!
Attempting to delete C:\windows\system32\kpdxlyok.exe
C:\windows\system32\kpdxlyok.exe Has been deleted!
Attempting to delete C:\windows\system32\kriqffno.dll
C:\windows\system32\kriqffno.dll Has been deleted!
Attempting to delete C:\windows\system32\kugdimvc.ini
C:\windows\system32\kugdimvc.ini Has been deleted!
Attempting to delete C:\windows\system32\lbotifcs.ini
C:\windows\system32\lbotifcs.ini Has been deleted!
Attempting to delete C:\windows\system32\ldypepqu.ini
C:\windows\system32\ldypepqu.ini Has been deleted!
Attempting to delete C:\windows\system32\lnemodyo.exe
C:\windows\system32\lnemodyo.exe Has been deleted!
Attempting to delete C:\windows\system32\lnnpo.ini
C:\windows\system32\lnnpo.ini Has been deleted!
Attempting to delete C:\windows\system32\lrbnloqa.exe
C:\windows\system32\lrbnloqa.exe Has been deleted!
Attempting to delete C:\windows\system32\maubgcus.dll
C:\windows\system32\maubgcus.dll Has been deleted!
Attempting to delete C:\windows\system32\mkhgabwm.exe
C:\windows\system32\mkhgabwm.exe Has been deleted!
Attempting to delete C:\WINDOWS\system32\mmwmktiq.dll
C:\WINDOWS\system32\mmwmktiq.dll Has been deleted!
Attempting to delete C:\windows\system32\mynmdasm.exe
C:\windows\system32\mynmdasm.exe Has been deleted!
Attempting to delete C:\windows\system32\npklasqh.exe
C:\windows\system32\npklasqh.exe Has been deleted!
Attempting to delete C:\windows\system32\nqkajnki.dll
C:\windows\system32\nqkajnki.dll Has been deleted!
Attempting to delete C:\windows\system32\onffqirk.ini
C:\windows\system32\onffqirk.ini Has been deleted!
Attempting to delete C:\windows\system32\opnnl.dll
C:\windows\system32\opnnl.dll Has been deleted!
Attempting to delete C:\windows\system32\otssodvr.exe
C:\windows\system32\otssodvr.exe Has been deleted!
Attempting to delete C:\windows\system32\oxmmkgnq.exe
C:\windows\system32\oxmmkgnq.exe Has been deleted!
Attempting to delete C:\windows\system32\oydlopcw.dll
C:\windows\system32\oydlopcw.dll Has been deleted!
Attempting to delete C:\windows\system32\pettjhsj.exe
C:\windows\system32\pettjhsj.exe Has been deleted!
Attempting to delete C:\windows\system32\ppdtkcvt.ini
C:\windows\system32\ppdtkcvt.ini Has been deleted!
Attempting to delete C:\windows\system32\qgknulgi.dll
C:\windows\system32\qgknulgi.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\scfitobl.dll
C:\WINDOWS\system32\scfitobl.dll Could not be deleted.
Attempting to delete C:\windows\system32\sjkidcuv.exe
C:\windows\system32\sjkidcuv.exe Has been deleted!
Attempting to delete C:\windows\system32\stiavwef.exe
C:\windows\system32\stiavwef.exe Has been deleted!
Attempting to delete C:\windows\system32\sucgbuam.ini
C:\windows\system32\sucgbuam.ini Has been deleted!
Attempting to delete C:\windows\system32\tidruari.dll
C:\windows\system32\tidruari.dll Has been deleted!
Attempting to delete C:\windows\system32\tuhpincd.dll
C:\windows\system32\tuhpincd.dll Has been deleted!
Attempting to delete C:\windows\system32\tvcktdpp.dll
C:\windows\system32\tvcktdpp.dll Has been deleted!
Attempting to delete C:\windows\system32\unqmrguf.dll
C:\windows\system32\unqmrguf.dll Has been deleted!
Attempting to delete C:\windows\system32\uqpepydl.dll
C:\windows\system32\uqpepydl.dll Could not be deleted.
Attempting to delete C:\windows\system32\utmoggvu.exe
C:\windows\system32\utmoggvu.exe Has been deleted!
Attempting to delete C:\windows\system32\vflqnmsw.exe
C:\windows\system32\vflqnmsw.exe Has been deleted!
Attempting to delete C:\windows\system32\vugwrmpe.ini
C:\windows\system32\vugwrmpe.ini Has been deleted!
Attempting to delete C:\windows\system32\wdfwjehe.dll
C:\windows\system32\wdfwjehe.dll Has been deleted!
Attempting to delete C:\windows\system32\wmfjvfyk.exe
C:\windows\system32\wmfjvfyk.exe Has been deleted!
Attempting to delete C:\WINDOWS\system32\wxbeg.bak1
C:\WINDOWS\system32\wxbeg.bak1 Has been deleted!
Attempting to delete C:\windows\system32\wxbeg.bak2
C:\windows\system32\wxbeg.bak2 Has been deleted!
Attempting to delete C:\windows\system32\wxbeg.ini
C:\windows\system32\wxbeg.ini Has been deleted!
Attempting to delete C:\windows\system32\wxbeg.ini2
C:\windows\system32\wxbeg.ini2 Has been deleted!
Attempting to delete C:\windows\system32\wxbeg.tmp
C:\windows\system32\wxbeg.tmp Has been deleted!
Attempting to delete C:\windows\system32\xnebifid.ini
C:\windows\system32\xnebifid.ini Has been deleted!
Attempting to delete C:\windows\system32\ykabndxa.ini
C:\windows\system32\ykabndxa.ini Has been deleted!
Performing Repairs to the registry.
Done!
2/VIRTUALMUNDOBEGONE
[06/29/2007, 14:54:24] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\SIMO\Bureau\VirtumundoBeGone.exe" )
[06/29/2007, 14:54:34] - Detected System Information:
[06/29/2007, 14:54:34] - Windows Version: 5.1.2600, Service Pack 2
[06/29/2007, 14:54:34] - Current Username: SIMO (Admin)
[06/29/2007, 14:54:34] - Windows is in NORMAL mode.
[06/29/2007, 14:54:34] - Searching for Browser Helper Objects:
[06/29/2007, 14:54:34] - BHO 1: {00000010-6F7D-442C-93E3-4A4827C2E4C8} (BHObj Class)
[06/29/2007, 14:54:34] - BHO 2: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper)
[06/29/2007, 14:54:34] - BHO 3: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[06/29/2007, 14:54:34] - BHO 4: {2843DAC1-05EF-11D2-95BA-0060083493D6} (DgnWebIE)
[06/29/2007, 14:54:34] - BHO 5: {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} (Need2Find Bar BHO)
[06/29/2007, 14:54:34] - BHO 6: {4E7BD74F-2B8D-469E-90F0-F66AB581A933} ()
[06/29/2007, 14:54:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:54:34] - No filename found. Continuing.
[06/29/2007, 14:54:34] - BHO 7: {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} (PaltalkWebLogin)
[06/29/2007, 14:54:34] - BHO 8: {59879FA4-4790-461c-A1CC-4EC4DE4CA483} (RXResultTracker Class)
[06/29/2007, 14:54:34] - BHO 9: {6099B953-DB0E-4917-AA05-222B288C15F5} ()
[06/29/2007, 14:54:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:54:34] - Checking for HKLM\...\Winlogon\Notify\nqkajnki
[06/29/2007, 14:54:34] - Key not found: HKLM\...\Winlogon\Notify\nqkajnki, continuing.
[06/29/2007, 14:54:34] - BHO 10: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
[06/29/2007, 14:54:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:54:34] - No filename found. Continuing.
[06/29/2007, 14:54:34] - BHO 11: {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} (BHObj Class)
[06/29/2007, 14:54:34] - BHO 12: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[06/29/2007, 14:54:34] - BHO 13: {A3FDD654-A057-4971-9844-4ED8E67DBBB8} (BAHelper Class)
[06/29/2007, 14:54:34] - BHO 14: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[06/29/2007, 14:54:34] - BHO 15: {BDF3E430-B101-42AD-A544-FADC6B084872} (CNavExtBho Class)
[06/29/2007, 14:54:34] - BHO 16: {DB89B365-3E56-4306-8B67-23A853FBB26E} ()
[06/29/2007, 14:54:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:54:34] - Checking for HKLM\...\Winlogon\Notify\gebxw
[06/29/2007, 14:54:34] - Key not found: HKLM\...\Winlogon\Notify\gebxw, continuing.
[06/29/2007, 14:54:34] - BHO 17: {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} ()
[06/29/2007, 14:54:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:54:34] - Checking for HKLM\...\Winlogon\Notify\nqkajnki
[06/29/2007, 14:54:34] - Key not found: HKLM\...\Winlogon\Notify\nqkajnki, continuing.
[06/29/2007, 14:54:34] - Finished Searching Browser Helper Objects
[06/29/2007, 14:54:34] - Finishing up...
[06/29/2007, 14:54:34] - Nothing found! Exiting...
[06/29/2007, 14:56:12] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\SIMO\Local Settings\Temporary Internet Files\Content.IE5\1CLG1FEI\VirtumundoBeGone[1].exe" )
[06/29/2007, 14:56:19] - Detected System Information:
[06/29/2007, 14:56:19] - Windows Version: 5.1.2600, Service Pack 2
[06/29/2007, 14:56:19] - Current Username: SIMO (Admin)
[06/29/2007, 14:56:19] - Windows is in NORMAL mode.
[06/29/2007, 14:56:19] - Searching for Browser Helper Objects:
[06/29/2007, 14:56:19] - BHO 1: {00000010-6F7D-442C-93E3-4A4827C2E4C8} (BHObj Class)
[06/29/2007, 14:56:19] - BHO 2: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper)
[06/29/2007, 14:56:19] - BHO 3: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[06/29/2007, 14:56:19] - BHO 4: {2843DAC1-05EF-11D2-95BA-0060083493D6} (DgnWebIE)
[06/29/2007, 14:56:19] - BHO 5: {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} (Need2Find Bar BHO)
[06/29/2007, 14:56:19] - BHO 6: {4E7BD74F-2B8D-469E-90F0-F66AB581A933} ()
[06/29/2007, 14:56:19] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:56:19] - No filename found. Continuing.
[06/29/2007, 14:56:19] - BHO 7: {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} (PaltalkWebLogin)
[06/29/2007, 14:56:19] - BHO 8: {59879FA4-4790-461c-A1CC-4EC4DE4CA483} (RXResultTracker Class)
[06/29/2007, 14:56:19] - BHO 9: {6099B953-DB0E-4917-AA05-222B288C15F5} ()
[06/29/2007, 14:56:19] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:56:19] - Checking for HKLM\...\Winlogon\Notify\nqkajnki
[06/29/2007, 14:56:19] - Key not found: HKLM\...\Winlogon\Notify\nqkajnki, continuing.
[06/29/2007, 14:56:19] - BHO 10: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
[06/29/2007, 14:56:19] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:56:19] - No filename found. Continuing.
[06/29/2007, 14:56:19] - BHO 11: {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} (BHObj Class)
[06/29/2007, 14:56:19] - BHO 12: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[06/29/2007, 14:56:19] - BHO 13: {A3FDD654-A057-4971-9844-4ED8E67DBBB8} (BAHelper Class)
[06/29/2007, 14:56:19] - BHO 14: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[06/29/2007, 14:56:19] - BHO 15: {BDF3E430-B101-42AD-A544-FADC6B084872} (CNavExtBho Class)
[06/29/2007, 14:56:19] - BHO 16: {DB89B365-3E56-4306-8B67-23A853FBB26E} ()
[06/29/2007, 14:56:19] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:56:19] - Checking for HKLM\...\Winlogon\Notify\gebxw
[06/29/2007, 14:56:19] - Key not found: HKLM\...\Winlogon\Notify\gebxw, continuing.
[06/29/2007, 14:56:19] - BHO 17: {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} ()
[06/29/2007, 14:56:19] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/29/2007, 14:56:19] - Checking for HKLM\...\Winlogon\Notify\nqkajnki
[06/29/2007, 14:56:19] - Key not found: HKLM\...\Winlogon\Notify\nqkajnki, continuing.
[06/29/2007, 14:56:19] - Finished Searching Browser Helper Objects
[06/29/2007, 14:56:19] - Finishing up...
[06/29/2007, 14:56:19] - Nothing found! Exiting...
3/ NOUVEAU RAPPORT HIJACKTHIS
Logfile of HijackThis v1.99.1
Scan saved at 15:31:03, on 29/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\SurfAccuracy\SAcc.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\dtkjxqo.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\windows\system32\drivers\uzcx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\SIMO\Bureau\scanner.exe\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q304&bd=pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - (no file)
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\PROGRA~1\RXTOOL~1\sfcont.dll (file missing)
O2 - BHO: (no name) - {6099B953-DB0E-4917-AA05-222B288C15F5} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Program Files\SideFind\sfbho.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {DB89B365-3E56-4306-8B67-23A853FBB26E} - C:\WINDOWS\system32\gebxw.dll (file missing)
O2 - BHO: (no name) - {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [CICache] CICache.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [fgCJa] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [Irnewh] C:\Program Files\Wzejn\Odbivqr.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (VC0305)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ReJf5vH] C:\WINDOWS\dtkjxqo.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [qikqvq] c:\windows\system32\qikqvq.exe qikqvq
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [L07FXLRD_16378120] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2007 - Études DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsvqg.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
salwa5
Messages postés
7452
Date d'inscription
jeudi 30 novembre 2006
Statut
Contributeur
Dernière intervention
18 août 2012
1 632
29 juin 2007 à 18:14
29 juin 2007 à 18:14
ok les outils ont bien travaillé mais il reste des infections :p
telecharge en urgence un antivirus
Avast (antivirus)
https://www.clubic.com/telecharger-fiche11113-avast-antivirus-gratuit.html
tutorial
https://forums.cnetfrance.fr
scan ton pc avec de prefernce fait un scan minutieux ca prend bcp de temp mais ca vaut le coup :)
ensuite poste un nouveau hijacthis
a+++
telecharge en urgence un antivirus
Avast (antivirus)
https://www.clubic.com/telecharger-fiche11113-avast-antivirus-gratuit.html
tutorial
https://forums.cnetfrance.fr
scan ton pc avec de prefernce fait un scan minutieux ca prend bcp de temp mais ca vaut le coup :)
ensuite poste un nouveau hijacthis
a+++
en effet sa a eté tres long...mais l'antivirus n'a pas pu supprimer les 28 fichiers infectés,il les a juste mi en quarantaine.
voici le nouveau rapport hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 19:49:21, on 29/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Dit.exe
C:\Program Files\SurfAccuracy\SAcc.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\dtkjxqo.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\windows\system32\drivers\uzcx.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Documents and Settings\SIMO\Bureau\scanner.exe\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q304&bd=pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - (no file)
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\PROGRA~1\RXTOOL~1\sfcont.dll (file missing)
O2 - BHO: (no name) - {6099B953-DB0E-4917-AA05-222B288C15F5} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {DB89B365-3E56-4306-8B67-23A853FBB26E} - C:\WINDOWS\system32\gebxw.dll (file missing)
O2 - BHO: (no name) - {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [CICache] CICache.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [fgCJa] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [Irnewh] C:\Program Files\Wzejn\Odbivqr.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (VC0305)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ReJf5vH] C:\WINDOWS\dtkjxqo.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [qikqvq] c:\windows\system32\qikqvq.exe qikqvq
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [L07FXLRD_16378120] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2007 - Études DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsxpz.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
voici le nouveau rapport hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 19:49:21, on 29/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Dit.exe
C:\Program Files\SurfAccuracy\SAcc.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\dtkjxqo.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\windows\system32\drivers\uzcx.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Documents and Settings\SIMO\Bureau\scanner.exe\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q304&bd=pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - (no file)
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\PROGRA~1\RXTOOL~1\sfcont.dll (file missing)
O2 - BHO: (no name) - {6099B953-DB0E-4917-AA05-222B288C15F5} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {DB89B365-3E56-4306-8B67-23A853FBB26E} - C:\WINDOWS\system32\gebxw.dll (file missing)
O2 - BHO: (no name) - {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [CICache] CICache.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [fgCJa] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [Irnewh] C:\Program Files\Wzejn\Odbivqr.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (VC0305)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ReJf5vH] C:\WINDOWS\dtkjxqo.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [qikqvq] c:\windows\system32\qikqvq.exe qikqvq
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [L07FXLRD_16378120] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2007 - Études DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsxpz.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
salwa5
Messages postés
7452
Date d'inscription
jeudi 30 novembre 2006
Statut
Contributeur
Dernière intervention
18 août 2012
1 632
29 juin 2007 à 22:16
29 juin 2007 à 22:16
du moment qu'ils sont en quarantaine donc c'est bon :) ca veut dire qu'ils sont isolé du system et donc inoffonsive
il reste quelque infections , bon tu peu supprimé vundofix et VirtumundoBegone et telecharge ceci
AVG anti spyware
https://www.01net.com/telecharger/
(n'oublie pas de le mettre a jour avant de lancer le scan)
Relance AVG AS puis choisis l'onglet "Analyse"
Puis l'onglet "Paramètres"
Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine"
Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"
/!\ Si un fichier est infecté en fin d'analyse /!\
Clique sur "Appliquer toutes les actions "
Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
Enregistre ce fichier texte sur ton bureau ensuite colle le raport ici
supprime les fichiers inutiles (fichiers temporaire , cookies ...ect ) et netoye ta base de registre avec ceci :
Ccleaner
https://www.malekal.com/tutoriel-ccleaner/
a+++++
il reste quelque infections , bon tu peu supprimé vundofix et VirtumundoBegone et telecharge ceci
AVG anti spyware
https://www.01net.com/telecharger/
(n'oublie pas de le mettre a jour avant de lancer le scan)
Relance AVG AS puis choisis l'onglet "Analyse"
Puis l'onglet "Paramètres"
Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine"
Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"
/!\ Si un fichier est infecté en fin d'analyse /!\
Clique sur "Appliquer toutes les actions "
Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
Enregistre ce fichier texte sur ton bureau ensuite colle le raport ici
supprime les fichiers inutiles (fichiers temporaire , cookies ...ect ) et netoye ta base de registre avec ceci :
Ccleaner
https://www.malekal.com/tutoriel-ccleaner/
a+++++
c'est assez bisare puisque AVG a mis tous les fichiers infectés en quarantaine mais dans le rapport il est inscrit qu'il les a ignorés...
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 22:28:09 29/06/2007
+ Résultat de l'analyse:
HKU\S-1-5-21-3027245203-335611329-531618950-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA0D26BD-9029-431A-86E0-83152D67828A} -> Adware.180Solutions : Ignoré.
C:\Program Files\Altnet -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\Download Manager -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cran.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\e_spyw.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\jpeg.xmd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_97.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\plugins.cab.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.ivd.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\DMinfo3.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\Setup.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\adm4.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\admdata.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\admdloader.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\admprog.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\atl.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\dmfiles.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\dminstall7.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\msvcirt.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\mysearch.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\pmexe.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\pmfiles.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\pminstall.cab -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\TopSearch -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Cydoor -> Adware.Cydoor : Ignoré.
C:\Program Files\Fichiers communs\WinFixer 2005\uwappchk.dll -> Adware.ErrorSafe : Ignoré.
HKLM\SOFTWARE\Classes\instafink.INSTAFINK -> Adware.InstaFinder : Ignoré.
HKLM\SOFTWARE\Classes\instafink.INSTAFINK\Clsid -> Adware.InstaFinder : Ignoré.
C:\Program Files\Internet Optimizer -> Adware.InternetOptimizer : Ignoré.
C:\Program Files\Internet Optimizer\update -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\Browser Helper -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\Browser Helper\cf1 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf1 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf2 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf3 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf4 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf5 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Optimizer -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Kapabout -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Rotue -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\AMeOpt -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Policies\Avenue Media -> Adware.InternetOptimizer : Ignoré.
C:\Program Files\ISTsvc -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\ISTsvc -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\YourSiteBar -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\YourSiteBar\Historyfiles -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj.1 -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj\CLSID -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj\CurVer -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj.1 -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj\CLSID -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj\CurVer -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DyFuCA -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\PowerScan -> Adware.PowerScan : Ignoré.
HKLM\SOFTWARE\Classes\CLSID\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKU\S-1-5-21-3027245203-335611329-531618950-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
C:\Program Files\SideFind -> Adware.SideFind : Ignoré.
C:\Program Files\SideFind\sfexd001 -> Adware.SideFind : Ignoré.
C:\Program Files\SideFind\update -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper.1 -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper\CLSID -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper\CurVer -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder.1 -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder\CLSID -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder\CurVer -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Microsoft\SideFind -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SideFind -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\SideFind -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\SideFind\History -> Adware.SideFind : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temporary Internet Files\Content.IE5\OHYJ8PE7\uninstaller.prod.v1002.23mar2006.exe[1].0c49b348ce1d3b98bec782d48a948dc2 -> Adware.SurfAcc : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\SAcc.prod.v1186.17jan2007.exe.15a56742d952e8b077a4327010c31784 -> Adware.SurfAccuracy : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\SAcc.prod.v1190.15fev2007.exe.acdec9dc7509ffcd5aeeb1e6095ec5b5 -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\License.lnk -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\SAcc.cfg -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\SAcc.exe -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\SAccU.exe -> Adware.SurfAccuracy : Ignoré.
[1504] C:\Program Files\SurfAccuracy\SAcc.exe -> Adware.SurfAccuracy : Ignoré.
[1768] C:\WINDOWS\dtkjxqo.exe -> Adware.SurfAccuracy : Ignoré.
C:\VundoFix Backups\iifgedd.dll.bad -> Adware.Virtumonde : Ignoré.
C:\WINDOWS\system32\iifgedd.dll -> Adware.Virtumonde : Ignoré.
C:\Program Files\Fichiers communs\WinFixer 2005\FCrXML.dll -> Adware.Winfixer : Ignoré.
C:\Program Files\YourSiteBar -> Adware.YourSiteBar : Ignoré.
C:\Program Files\YourSiteBar\imagemap_normal.bmp -> Adware.YourSiteBar : Ignoré.
C:\Program Files\YourSiteBar\version.txt -> Adware.YourSiteBar : Ignoré.
C:\Program Files\YourSiteBar\yoursitebar.xml -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj.1 -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj\CLSID -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj\CurVer -> Adware.YourSiteBar : Ignoré.
C:\Program Files\Alwil Software\Avast4\DATA\moved\[UPX].vir -> Dialer.InstantAccess.m : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943727.exe -> Dialer.InstantAccess.m : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@247realmedia[1].txt -> TrackingCookie.247realmedia : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@divx.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@adbrite[2].txt -> TrackingCookie.Adbrite : Ignoré.
:mozilla.15:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Adtech : Ignoré.
:mozilla.16:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@advertising[2].txt -> TrackingCookie.Advertising : Ignoré.
:mozilla.13:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
:mozilla.18:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@bluestreak[3].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@casalemedia[2].txt -> TrackingCookie.Casalemedia : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@clickbank[1].txt -> TrackingCookie.Clickbank : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Ignoré.
:mozilla.17:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré.
:mozilla.9:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@estat[2].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@fastclick[2].txt -> TrackingCookie.Fastclick : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@fastclick[1].txt -> TrackingCookie.Fastclick : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@findwhat[1].txt -> TrackingCookie.Findwhat : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@ehg-dig.hitbox[1].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@hitbox[1].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@ehg-youtube.hitbox[1].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@hitbox[1].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@counter.hitslink[1].txt -> TrackingCookie.Hitslink : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Ignoré.
:mozilla.7:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Overture : Ignoré.
:mozilla.8:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@overture[1].txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@www.paypal[1].txt -> TrackingCookie.Paypal : Ignoré.
:mozilla.27:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Real : Ignoré.
:mozilla.28:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Real : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.14:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.15:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.16:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.17:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.18:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.19:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.10:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.10:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.11:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.11:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.12:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.9:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@specificclick[2].txt -> TrackingCookie.Specificclick : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@statcounter[1].txt -> TrackingCookie.Statcounter : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@tacoda[1].txt -> TrackingCookie.Tacoda : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@m.webtrends[1].txt -> TrackingCookie.Webtrends : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@zedo[2].txt -> TrackingCookie.Zedo : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943666.exe -> Trojan.Agent.anr : Ignoré.
C:\VundoFix Backups\hklmduyd.exe.bad -> Trojan.Agent.anr : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943651.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943653.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943654.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943658.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943660.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943663.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943670.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943671.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943674.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943676.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943678.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943680.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943681.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943685.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943686.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943688.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943691.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943692.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943698.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943699.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943702.exe -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\almavxvf.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\bmddlbrp.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\bugpyegs.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\dxdmpvle.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\ejtcwgof.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\emcvlxpj.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\gcbxpalc.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\isnxxgfy.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\kpdxlyok.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\lnemodyo.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\lrbnloqa.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\mkhgabwm.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\mynmdasm.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\npklasqh.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\otssodvr.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\oxmmkgnq.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\pettjhsj.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\sjkidcuv.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\stiavwef.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\utmoggvu.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\vflqnmsw.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\wmfjvfyk.exe.bad -> Trojan.Agent.aoy : Ignoré.
Fin du rapport
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 22:28:09 29/06/2007
+ Résultat de l'analyse:
HKU\S-1-5-21-3027245203-335611329-531618950-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA0D26BD-9029-431A-86E0-83152D67828A} -> Adware.180Solutions : Ignoré.
C:\Program Files\Altnet -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\Download Manager -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cran.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\e_spyw.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\jpeg.xmd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_97.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\plugins.cab.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.ivd.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\DMinfo3.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\Setup.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\adm4.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\admdata.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\admdloader.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\admprog.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\atl.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\dmfiles.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\dminstall7.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\msvcirt.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\mysearch.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\pmexe.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\pmfiles.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\pminstall.cab -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\TopSearch -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Cydoor -> Adware.Cydoor : Ignoré.
C:\Program Files\Fichiers communs\WinFixer 2005\uwappchk.dll -> Adware.ErrorSafe : Ignoré.
HKLM\SOFTWARE\Classes\instafink.INSTAFINK -> Adware.InstaFinder : Ignoré.
HKLM\SOFTWARE\Classes\instafink.INSTAFINK\Clsid -> Adware.InstaFinder : Ignoré.
C:\Program Files\Internet Optimizer -> Adware.InternetOptimizer : Ignoré.
C:\Program Files\Internet Optimizer\update -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\Browser Helper -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\Browser Helper\cf1 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf1 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf2 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf3 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf4 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf5 -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Optimizer -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Kapabout -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Rotue -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\AMeOpt -> Adware.InternetOptimizer : Ignoré.
HKLM\SOFTWARE\Policies\Avenue Media -> Adware.InternetOptimizer : Ignoré.
C:\Program Files\ISTsvc -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\ISTsvc -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\YourSiteBar -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\YourSiteBar\Historyfiles -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj.1 -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj\CLSID -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj\CurVer -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj.1 -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj\CLSID -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj\CurVer -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DyFuCA -> Adware.MoneyTree : Ignoré.
HKLM\SOFTWARE\PowerScan -> Adware.PowerScan : Ignoré.
HKLM\SOFTWARE\Classes\CLSID\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKU\S-1-5-21-3027245203-335611329-531618950-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
C:\Program Files\SideFind -> Adware.SideFind : Ignoré.
C:\Program Files\SideFind\sfexd001 -> Adware.SideFind : Ignoré.
C:\Program Files\SideFind\update -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper.1 -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper\CLSID -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper\CurVer -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder.1 -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder\CLSID -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder\CurVer -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Microsoft\SideFind -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SideFind -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\SideFind -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\SideFind\History -> Adware.SideFind : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temporary Internet Files\Content.IE5\OHYJ8PE7\uninstaller.prod.v1002.23mar2006.exe[1].0c49b348ce1d3b98bec782d48a948dc2 -> Adware.SurfAcc : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\SAcc.prod.v1186.17jan2007.exe.15a56742d952e8b077a4327010c31784 -> Adware.SurfAccuracy : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\SAcc.prod.v1190.15fev2007.exe.acdec9dc7509ffcd5aeeb1e6095ec5b5 -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\License.lnk -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\SAcc.cfg -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\SAcc.exe -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\SAccU.exe -> Adware.SurfAccuracy : Ignoré.
[1504] C:\Program Files\SurfAccuracy\SAcc.exe -> Adware.SurfAccuracy : Ignoré.
[1768] C:\WINDOWS\dtkjxqo.exe -> Adware.SurfAccuracy : Ignoré.
C:\VundoFix Backups\iifgedd.dll.bad -> Adware.Virtumonde : Ignoré.
C:\WINDOWS\system32\iifgedd.dll -> Adware.Virtumonde : Ignoré.
C:\Program Files\Fichiers communs\WinFixer 2005\FCrXML.dll -> Adware.Winfixer : Ignoré.
C:\Program Files\YourSiteBar -> Adware.YourSiteBar : Ignoré.
C:\Program Files\YourSiteBar\imagemap_normal.bmp -> Adware.YourSiteBar : Ignoré.
C:\Program Files\YourSiteBar\version.txt -> Adware.YourSiteBar : Ignoré.
C:\Program Files\YourSiteBar\yoursitebar.xml -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj.1 -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj\CLSID -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj\CurVer -> Adware.YourSiteBar : Ignoré.
C:\Program Files\Alwil Software\Avast4\DATA\moved\[UPX].vir -> Dialer.InstantAccess.m : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943727.exe -> Dialer.InstantAccess.m : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@247realmedia[1].txt -> TrackingCookie.247realmedia : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@divx.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@adbrite[2].txt -> TrackingCookie.Adbrite : Ignoré.
:mozilla.15:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Adtech : Ignoré.
:mozilla.16:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@advertising[2].txt -> TrackingCookie.Advertising : Ignoré.
:mozilla.13:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
:mozilla.18:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@bluestreak[3].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@casalemedia[2].txt -> TrackingCookie.Casalemedia : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@clickbank[1].txt -> TrackingCookie.Clickbank : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Ignoré.
:mozilla.17:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré.
:mozilla.9:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@estat[2].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@fastclick[2].txt -> TrackingCookie.Fastclick : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@fastclick[1].txt -> TrackingCookie.Fastclick : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@findwhat[1].txt -> TrackingCookie.Findwhat : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@ehg-dig.hitbox[1].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@hitbox[1].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@ehg-youtube.hitbox[1].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@hitbox[1].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@counter.hitslink[1].txt -> TrackingCookie.Hitslink : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Ignoré.
:mozilla.7:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Overture : Ignoré.
:mozilla.8:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@overture[1].txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@www.paypal[1].txt -> TrackingCookie.Paypal : Ignoré.
:mozilla.27:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Real : Ignoré.
:mozilla.28:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Real : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.14:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.15:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.16:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.17:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.18:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.19:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.10:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.10:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.11:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.11:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.12:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.9:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@specificclick[2].txt -> TrackingCookie.Specificclick : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@statcounter[1].txt -> TrackingCookie.Statcounter : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@tacoda[1].txt -> TrackingCookie.Tacoda : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@m.webtrends[1].txt -> TrackingCookie.Webtrends : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Ignoré.
C:\Documents and Settings\SIMO\Local Settings\Temp\Cookies\simo@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Ignoré.
C:\Documents and Settings\SIMO\Cookies\simo@zedo[2].txt -> TrackingCookie.Zedo : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943666.exe -> Trojan.Agent.anr : Ignoré.
C:\VundoFix Backups\hklmduyd.exe.bad -> Trojan.Agent.anr : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943651.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943653.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943654.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943658.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943660.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943663.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943670.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943671.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943674.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943676.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943678.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943680.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943681.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943685.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943686.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943688.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943691.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943692.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943698.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943699.exe -> Trojan.Agent.aoy : Ignoré.
C:\System Volume Information\_restore{E3C36DB2-4F85-42C4-83B9-EE65FCF13087}\RP463\A0943702.exe -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\almavxvf.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\bmddlbrp.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\bugpyegs.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\dxdmpvle.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\ejtcwgof.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\emcvlxpj.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\gcbxpalc.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\isnxxgfy.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\kpdxlyok.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\lnemodyo.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\lrbnloqa.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\mkhgabwm.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\mynmdasm.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\npklasqh.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\otssodvr.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\oxmmkgnq.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\pettjhsj.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\sjkidcuv.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\stiavwef.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\utmoggvu.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\vflqnmsw.exe.bad -> Trojan.Agent.aoy : Ignoré.
C:\VundoFix Backups\wmfjvfyk.exe.bad -> Trojan.Agent.aoy : Ignoré.
Fin du rapport
salwa5
Messages postés
7452
Date d'inscription
jeudi 30 novembre 2006
Statut
Contributeur
Dernière intervention
18 août 2012
1 632
30 juin 2007 à 02:19
30 juin 2007 à 02:19
ok continues les manips :) lance ccleaner ensuite poste un nouveau raport hijacthis
a++++++
a++++++
ccleaner a fini le nettoyage,dc voila le nouveau rapport hijackthis:
ps:comment tu fais pour reconnaitre si il y'a encore des virus sur un ordi a partir d'un rapport hijackthis?
Logfile of HijackThis v1.99.1
Scan saved at 09:34:28, on 30/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\dtkjxqo.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\windows\system32\drivers\uzcx.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\SurfAccuracy\SAcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Documents and Settings\SIMO\Bureau\scanner.exe\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q304&bd=pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - (no file)
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\PROGRA~1\RXTOOL~1\sfcont.dll (file missing)
O2 - BHO: (no name) - {6099B953-DB0E-4917-AA05-222B288C15F5} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {DB89B365-3E56-4306-8B67-23A853FBB26E} - C:\WINDOWS\system32\gebxw.dll (file missing)
O2 - BHO: (no name) - {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [CICache] CICache.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [fgCJa] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [Irnewh] C:\Program Files\Wzejn\Odbivqr.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (VC0305)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ReJf5vH] C:\WINDOWS\dtkjxqo.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [qikqvq] c:\windows\system32\qikqvq.exe qikqvq
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [L07FXLRD_16378120] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2007 - Études DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsxpz.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
ps:comment tu fais pour reconnaitre si il y'a encore des virus sur un ordi a partir d'un rapport hijackthis?
Logfile of HijackThis v1.99.1
Scan saved at 09:34:28, on 30/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\dtkjxqo.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\windows\system32\drivers\uzcx.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\SurfAccuracy\SAcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Documents and Settings\SIMO\Bureau\scanner.exe\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q304&bd=pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - (no file)
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\PROGRA~1\RXTOOL~1\sfcont.dll (file missing)
O2 - BHO: (no name) - {6099B953-DB0E-4917-AA05-222B288C15F5} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {DB89B365-3E56-4306-8B67-23A853FBB26E} - C:\WINDOWS\system32\gebxw.dll (file missing)
O2 - BHO: (no name) - {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [CICache] CICache.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [fgCJa] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [Irnewh] C:\Program Files\Wzejn\Odbivqr.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (VC0305)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ReJf5vH] C:\WINDOWS\dtkjxqo.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [qikqvq] c:\windows\system32\qikqvq.exe qikqvq
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [L07FXLRD_16378120] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2007 - Études DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsxpz.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
salwa5
Messages postés
7452
Date d'inscription
jeudi 30 novembre 2006
Statut
Contributeur
Dernière intervention
18 août 2012
1 632
30 juin 2007 à 14:10
30 juin 2007 à 14:10
bonjour :) d'apres le raport hijacthis , avg antispyware n'as pas supprimé ce qu'il avait trouvé . par exemple le spyware surf accuracy est tjr present sur le raport
donc Relance AVG AS puis choisis l'onglet "Analyse"
Puis l'onglet "Paramètres"
Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine"
Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"
/!\ Si un fichier est infecté en fin d'analyse /!\
Clique sur "Appliquer toutes les actions "
Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
Enregistre ce fichier texte sur ton bureau ensuite colle le raport ici
a++++
donc Relance AVG AS puis choisis l'onglet "Analyse"
Puis l'onglet "Paramètres"
Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine"
Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"
/!\ Si un fichier est infecté en fin d'analyse /!\
Clique sur "Appliquer toutes les actions "
Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
Enregistre ce fichier texte sur ton bureau ensuite colle le raport ici
a++++
salut!j'ai effectué ce que tu m'a dit mais AVG ne repond plus lorsque je clique sur appliquer toutes les actions...que dois-je faire?essayer avec un autre antivirus?
salwa5
Messages postés
7452
Date d'inscription
jeudi 30 novembre 2006
Statut
Contributeur
Dernière intervention
18 août 2012
1 632
30 juin 2007 à 16:08
30 juin 2007 à 16:08
essay de le lancer en mode sans echec normalement il y'aura aucun probleme pour appliquer les actions
1/ Redémarre en mode Sans Échec
(au démarrage, tapote immédiatement la touche F8), puis tu verras un écran avec choix de démarrages :
choisis Mode sans échec avec les flèches du clavier, puis valide avec Entrée.
Choisis ton compte usuel (et non Administrateur).
2/ Relance AVG AS puis choisis l'onglet "Analyse"
Puis l'onglet "Paramètres"
Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine"
Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"
/!\ Si un fichier est infecté en fin d'analyse /!\
Clique sur "Appliquer toutes les actions "
Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
Enregistre ce fichier texte sur ton bureau ensuite colle le raport ici
a+++
1/ Redémarre en mode Sans Échec
(au démarrage, tapote immédiatement la touche F8), puis tu verras un écran avec choix de démarrages :
choisis Mode sans échec avec les flèches du clavier, puis valide avec Entrée.
Choisis ton compte usuel (et non Administrateur).
2/ Relance AVG AS puis choisis l'onglet "Analyse"
Puis l'onglet "Paramètres"
Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine"
Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"
/!\ Si un fichier est infecté en fin d'analyse /!\
Clique sur "Appliquer toutes les actions "
Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
Enregistre ce fichier texte sur ton bureau ensuite colle le raport ici
a+++
bonsoir,voila les 2 rapports AVG et hijackthis
--------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 19:16:51 30/06/2007
+ Résultat de l'analyse:
HKU\S-1-5-21-3027245203-335611329-531618950-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA0D26BD-9029-431A-86E0-83152D67828A} -> Adware.180Solutions : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\Download Manager -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cran.ivd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\e_spyw.ivd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.ivd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\jpeg.xmd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_97.ivd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\plugins.cab.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.cvd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.ivd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Altnet -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Altnet\TopSearch -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Cydoor -> Adware.Cydoor : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Fichiers communs\WinFixer 2005\uwappchk.dll -> Adware.ErrorSafe : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\instafink.INSTAFINK -> Adware.InstaFinder : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\instafink.INSTAFINK\Clsid -> Adware.InstaFinder : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Internet Optimizer -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Internet Optimizer\update -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\Browser Helper -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\Browser Helper\cf1 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf1 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf2 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf3 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf4 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf5 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Optimizer -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Kapabout -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Rotue -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\AMeOpt -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Policies\Avenue Media -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\ISTsvc -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\ISTsvc -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\YourSiteBar -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\YourSiteBar\Historyfiles -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj.1 -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj\CLSID -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj\CurVer -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj.1 -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj\CLSID -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj\CurVer -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DyFuCA -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\PowerScan -> Adware.PowerScan : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\CLSID\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Nettoyé et sauvegardé (mise en quarantaine).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-21-3027245203-335611329-531618950-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SideFind -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SideFind\sfexd001 -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SideFind\update -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper.1 -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper\CLSID -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper\CurVer -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\SideFind.Finder -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\SideFind.Finder.1 -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\SideFind.Finder\CLSID -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\SideFind.Finder\CurVer -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\SideFind -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SideFind -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\SideFind -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\SideFind\History -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SurfAccuracy -> Adware.SurfAccuracy : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SurfAccuracy\SAcc.exe -> Adware.SurfAccuracy : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SurfAccuracy\SAccU.exe -> Adware.SurfAccuracy : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SurfAccuracy\sacc.cfg -> Adware.SurfAccuracy : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\dtkjxqo.exe -> Adware.SurfAccuracy : Nettoyé et sauvegardé (mise en quarantaine).
C:\VundoFix Backups\iifgedd.dll.bad -> Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\iifgedd.dll -> Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Fichiers communs\WinFixer 2005\FCrXML.dll -> Adware.Winfixer : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\YourSiteBar -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\YourSiteBar\imagemap_normal.bmp -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\YourSiteBar\version.txt -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\YourSiteBar\yoursitebar.xml -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\Ysb.YsbObj -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\Ysb.YsbObj.1 -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\Ysb.YsbObj\CLSID -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\Ysb.YsbObj\CurVer -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
:mozilla.15:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.16:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.13:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\SIMO\Cookies\simo@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.18:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\SIMO\Cookies\simo@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.17:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.9:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\SIMO\Cookies\simo@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.7:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.8:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.27:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.28:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.14:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.15:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.16:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.17:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.18:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.19:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.10:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.10:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.11:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.11:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.12:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.9:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\SIMO\Cookies\simo@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\SIMO\Cookies\simo@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
Fin du rapport
HIJACKTHIS:
Logfile of HijackThis v1.99.1
Scan saved at 19:24:28, on 30/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Dit.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\windows\system32\drivers\uzcx.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\dsxpz.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Documents and Settings\SIMO\Bureau\scanner.exe\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q304&bd=pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - (no file)
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: (no name) - {6099B953-DB0E-4917-AA05-222B288C15F5} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {DB89B365-3E56-4306-8B67-23A853FBB26E} - C:\WINDOWS\system32\gebxw.dll (file missing)
O2 - BHO: (no name) - {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [CICache] CICache.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [fgCJa] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [Irnewh] C:\Program Files\Wzejn\Odbivqr.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (VC0305)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [qikqvq] c:\windows\system32\qikqvq.exe qikqvq
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [L07FXLRD_16378120] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2007 - Études DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsxpz.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
--------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 19:16:51 30/06/2007
+ Résultat de l'analyse:
HKU\S-1-5-21-3027245203-335611329-531618950-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA0D26BD-9029-431A-86E0-83152D67828A} -> Adware.180Solutions : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\Download Manager -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cran.ivd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\e_spyw.ivd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.ivd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\jpeg.xmd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_97.ivd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\plugins.cab.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.cvd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.ivd.cab -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Altnet -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Altnet\TopSearch -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Cydoor -> Adware.Cydoor : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Fichiers communs\WinFixer 2005\uwappchk.dll -> Adware.ErrorSafe : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\instafink.INSTAFINK -> Adware.InstaFinder : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\instafink.INSTAFINK\Clsid -> Adware.InstaFinder : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Internet Optimizer -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Internet Optimizer\update -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\Browser Helper -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\Browser Helper\cf1 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf1 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf2 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf3 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf4 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Avenue Media\Internet Optimizer\WSE\cf5 -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Optimizer -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Kapabout -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Rotue -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\AMeOpt -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Policies\Avenue Media -> Adware.InternetOptimizer : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\ISTsvc -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\ISTsvc -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\YourSiteBar -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\YourSiteBar\Historyfiles -> Adware.ISTBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj.1 -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj\CLSID -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.BHObj\CurVer -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj.1 -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj\CLSID -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\DyFuCA_BH.SinkObj\CurVer -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DyFuCA -> Adware.MoneyTree : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\PowerScan -> Adware.PowerScan : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\CLSID\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Nettoyé et sauvegardé (mise en quarantaine).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-21-3027245203-335611329-531618950-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SideFind -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SideFind\sfexd001 -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SideFind\update -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper.1 -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper\CLSID -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\BrowserHelperObject.BAHelper\CurVer -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\SideFind.Finder -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\SideFind.Finder.1 -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\SideFind.Finder\CLSID -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\SideFind.Finder\CurVer -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\SideFind -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SideFind -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\SideFind -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\SideFind\History -> Adware.SideFind : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SurfAccuracy -> Adware.SurfAccuracy : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SurfAccuracy\SAcc.exe -> Adware.SurfAccuracy : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SurfAccuracy\SAccU.exe -> Adware.SurfAccuracy : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\SurfAccuracy\sacc.cfg -> Adware.SurfAccuracy : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\dtkjxqo.exe -> Adware.SurfAccuracy : Nettoyé et sauvegardé (mise en quarantaine).
C:\VundoFix Backups\iifgedd.dll.bad -> Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\iifgedd.dll -> Adware.Virtumonde : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Fichiers communs\WinFixer 2005\FCrXML.dll -> Adware.Winfixer : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\YourSiteBar -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\YourSiteBar\imagemap_normal.bmp -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\YourSiteBar\version.txt -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\YourSiteBar\yoursitebar.xml -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\Ysb.YsbObj -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\Ysb.YsbObj.1 -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\Ysb.YsbObj\CLSID -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\Ysb.YsbObj\CurVer -> Adware.YourSiteBar : Nettoyé et sauvegardé (mise en quarantaine).
:mozilla.15:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.16:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.13:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\SIMO\Cookies\simo@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.18:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\SIMO\Cookies\simo@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.17:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.9:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\SIMO\Cookies\simo@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.7:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.8:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.27:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.28:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.14:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.15:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.16:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.17:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.18:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.19:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.10:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.10:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.11:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.11:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.12:C:\Documents and Settings\azzouz\Application Data\Mozilla\Firefox\Profiles\d06nsv2h.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.9:C:\Documents and Settings\SIMO\Application Data\Mozilla\Firefox\Profiles\hwf0uosd.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\SIMO\Cookies\simo@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\SIMO\Cookies\simo@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
Fin du rapport
HIJACKTHIS:
Logfile of HijackThis v1.99.1
Scan saved at 19:24:28, on 30/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Dit.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\windows\system32\drivers\uzcx.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\dsxpz.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Documents and Settings\SIMO\Bureau\scanner.exe\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q304&bd=pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - (no file)
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: (no name) - {6099B953-DB0E-4917-AA05-222B288C15F5} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {DB89B365-3E56-4306-8B67-23A853FBB26E} - C:\WINDOWS\system32\gebxw.dll (file missing)
O2 - BHO: (no name) - {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [CICache] CICache.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [fgCJa] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [Irnewh] C:\Program Files\Wzejn\Odbivqr.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (VC0305)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [qikqvq] c:\windows\system32\qikqvq.exe qikqvq
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [L07FXLRD_16378120] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2007 - Études DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsxpz.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
salwa5
Messages postés
7452
Date d'inscription
jeudi 30 novembre 2006
Statut
Contributeur
Dernière intervention
18 août 2012
1 632
30 juin 2007 à 22:36
30 juin 2007 à 22:36
ok les spywares ont bien été supprimé ..
tout d'abord desactive ce service inutile AFSEGTGF Windows Service
va dans le menu demarrer/executer tapes : services.msc
double cliques sur le service : AFSEGTGF Windows Service ,dans type de demarrage choisi desactiver puis clique sur arreter puis sur appliqué / ok
ouvre hijacthis coches ces lignes puis clic sur fix checked
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - (no file)
O2 - BHO: (no name) - {6099B953-DB0E-4917-AA05-222B288C15F5} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: (no name) - {DB89B365-3E56-4306-8B67-23A853FBB26E} - C:\WINDOWS\system32\gebxw.dll (file missing)
O2 - BHO: (no name) - {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [fgCJa] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [Irnewh] C:\Program Files\Wzejn\Odbivqr.exe
O4 - HKLM\..\Run: [qikqvq] c:\windows\system32\qikqvq.exe qikqvq
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
redemare en mode sans echec (redemarrage + tapotte sans arret sur la touche F8 desque l'ordi s'allume)
cherches et supprime les fichiers en gras :
c:\windows\system32\drivers\uzcx.exe
C:\WINDOWS\system32\dsxpz.exe
vide la corbeille
redemare en mode normal et fait ceci
Prends connaissance du contenu le lien suivant:
http://www.f-secure.com/products/license-terms/eult_fra.pdf
Tu as donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que tu vas télécharger.
Maintenant fais un clic droit sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Fais un clic droit sur navilog1.zip et choisis "tout extraire"
Ensuite double clique sur navilog1.bat
Laisses-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2 sans notre avis/accord)
Patientes jusqu'au message :
*** Analyse Termine le ..... ***
Appuies sur une touche comme demandé, le blocnote va s'ouvrir.
Copies-colles l'intégralité dans une réponse. Refermes le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
--
a+++++++
tout d'abord desactive ce service inutile AFSEGTGF Windows Service
va dans le menu demarrer/executer tapes : services.msc
double cliques sur le service : AFSEGTGF Windows Service ,dans type de demarrage choisi desactiver puis clique sur arreter puis sur appliqué / ok
ouvre hijacthis coches ces lignes puis clic sur fix checked
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-90F0-F66AB581A933} - (no file)
O2 - BHO: (no name) - {6099B953-DB0E-4917-AA05-222B288C15F5} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: (no name) - {DB89B365-3E56-4306-8B67-23A853FBB26E} - C:\WINDOWS\system32\gebxw.dll (file missing)
O2 - BHO: (no name) - {E8BA282B-1F1B-4884-BD52-B3AC4B7D5A18} - C:\WINDOWS\system32\nqkajnki.dll (file missing)
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [fgCJa] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\hkbjsas.exe
O4 - HKLM\..\Run: [Irnewh] C:\Program Files\Wzejn\Odbivqr.exe
O4 - HKLM\..\Run: [qikqvq] c:\windows\system32\qikqvq.exe qikqvq
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
redemare en mode sans echec (redemarrage + tapotte sans arret sur la touche F8 desque l'ordi s'allume)
cherches et supprime les fichiers en gras :
c:\windows\system32\drivers\uzcx.exe
C:\WINDOWS\system32\dsxpz.exe
vide la corbeille
redemare en mode normal et fait ceci
Prends connaissance du contenu le lien suivant:
http://www.f-secure.com/products/license-terms/eult_fra.pdf
Tu as donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que tu vas télécharger.
Maintenant fais un clic droit sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Fais un clic droit sur navilog1.zip et choisis "tout extraire"
Ensuite double clique sur navilog1.bat
Laisses-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2 sans notre avis/accord)
Patientes jusqu'au message :
*** Analyse Termine le ..... ***
Appuies sur une touche comme demandé, le blocnote va s'ouvrir.
Copies-colles l'intégralité dans une réponse. Refermes le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
--
a+++++++
bonjour!:)apres avoir instalé navilog,je n'arrive pas a l'executer,lorsque j'essaye,une fenetre windows portant le message suivant apparait:
"windows ne peut pas ouvrir le fichier : navilog1.dat
que voulez-vous faire?
utiliser le service web pour trouver le programme approprié
selectionner le programme ds la liste."
je l'ai desintallé puis reinstallé mais c tjr le mm probleme,je dois faire quoi?
"windows ne peut pas ouvrir le fichier : navilog1.dat
que voulez-vous faire?
utiliser le service web pour trouver le programme approprié
selectionner le programme ds la liste."
je l'ai desintallé puis reinstallé mais c tjr le mm probleme,je dois faire quoi?
salwa5
Messages postés
7452
Date d'inscription
jeudi 30 novembre 2006
Statut
Contributeur
Dernière intervention
18 août 2012
1 632
1 juil. 2007 à 13:19
1 juil. 2007 à 13:19
bonjour as tu bien decompresser le fichier navilog1.zip avant. c'est a dire
il faut clicker droit sur navilog1.zip et ensuite choisi extraire ici
si marche pas alors telecharge ce script pour reparer les fichier .bat
http://www.dougknox.com/xp/fileassoc/batch_file_assoc.zip
click droit sur batch_file_assoc.zip et choisi extraire ici ... tu va obtenir batch_file_assoc.reg , double clic dessu et accepte la fusion avec le registre
ensuite reexecute navilog1.dat et dit moi ce que ca donne
a+++
il faut clicker droit sur navilog1.zip et ensuite choisi extraire ici
si marche pas alors telecharge ce script pour reparer les fichier .bat
http://www.dougknox.com/xp/fileassoc/batch_file_assoc.zip
click droit sur batch_file_assoc.zip et choisi extraire ici ... tu va obtenir batch_file_assoc.reg , double clic dessu et accepte la fusion avec le registre
ensuite reexecute navilog1.dat et dit moi ce que ca donne
a+++
j'ai fait ce que tu m'as demandé,donc quand je reéxecute navilog1.dat une fenetre noir apparait,on me demande de choisir la langue,puis un message "veuillez patienter" apparait...sa fait 10 min que je patiente:),toujours rien...
salwa5
Messages postés
7452
Date d'inscription
jeudi 30 novembre 2006
Statut
Contributeur
Dernière intervention
18 août 2012
1 632
1 juil. 2007 à 18:13
1 juil. 2007 à 18:13
pas grave :) on va essayé avec un autre outil
Télécharge Blacklight (de F-Secure) sur un des sites suivant :
https://www.f-secure.com/en
https://europe.f-secure.com/exclude/blacklight/index.shtml
et sauvegarde le sur ton Bureau.
Double-clique blbeta.exe et accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next
Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).
Copie et colle le contenu de ce rapport dans ta prochaine réponse
a+++
Télécharge Blacklight (de F-Secure) sur un des sites suivant :
https://www.f-secure.com/en
https://europe.f-secure.com/exclude/blacklight/index.shtml
et sauvegarde le sur ton Bureau.
Double-clique blbeta.exe et accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next
Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).
Copie et colle le contenu de ce rapport dans ta prochaine réponse
a+++
