[virus] pc très lent

colle un rapport hijackthis

https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html

https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

-----------------
télécharger sur le bureau
Navilog.zip
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

= Double-Clic navilog1.zip
= Extraire tout sur le bureau
= Double-Clic navilog1 qui est sur le bureau
= Appuyer sur une touche jusqu' arriver aux options
= Choisir option 1

-----------------
utilise aussi pour supprimer tes traces

CCLEANER: (lance un nettoyage et répare erreurs) sans la barre yahoo

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

-----------
smit fraud fix

http://telechargement.zebulon.fr/smitfraudfix.html

2/ double clique sur smitfraudfix. puis selectionne 1 et appuyer sur entrée afin de créer le rapport des infection présentes. une fois le rapport effectué redemarre en mode sans echec (en appuyant sur F8 ou suppr, ou F5 au demarrage en général)

3/ puis refaire comme en 2/ mais selectionne l'option 2 et appuyer sur entrée pour commencer la desinfection. lorsque le programme demande si tu veut nettoyer le registre metsoui en tapant 0 et entrée

Bonjour, merci de m'aider .
J'ai fait tout ce que tu m'as demandé.
J'ai interrompu le scan navilog1 après plus d'une 1/2 heure d'attente. (bloqué sur recherche avec BlackLight Engine/F-Secure)
CCleaner a bien focntionné.
la barre d'outils "security Toolbar7.1" de IE est encore là.

Suivent les rapports hijackthis et SmitFraudFix:

Logfile of HijackThis v1.99.1
Scan saved at 18:02:59, on 10/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\RSS Xpress\RSS Xpress.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hijackthis\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {002F1260-A5B2-41D3-B260-A9C96060BA77} - C:\WINDOWS\system32\ssqrq.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\dkazqfmu.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: (no name) - {F4002052-AB29-4B33-8C8D-0E99084564EC} - C:\WINDOWS\system32\jkkklll.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Security Toolbar - {11A69AE4-FBED-4832-A2BF-45AF82825583} - C:\WINDOWS\system32\pzentreb.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKCU\..\Run: [RSS Xpress] C:\Program Files\RSS Xpress\RSS Xpress.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - http://components.viewpoint.com/...
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {86992E9F-0414-40FD-B586-0E782A613504} - http://cpimg.msnplus.co.kr/_Download/ActiveX/WPCPackInstaller.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: agajiekq - C:\WINDOWS\SYSTEM32\agajiekq.dll
O20 - Winlogon Notify: dkazqfmu - C:\WINDOWS\SYSTEM32\dkazqfmu.dll
O20 - Winlogon Notify: jkkklll - C:\WINDOWS\SYSTEM32\jkkklll.dll
O20 - Winlogon Notify: nlrvyddm - C:\WINDOWS\SYSTEM32\nlrvyddm.dll
O20 - Winlogon Notify: pzentreb - C:\WINDOWS\SYSTEM32\pzentreb.dll
O20 - Winlogon Notify: rplbrkaz - C:\WINDOWS\SYSTEM32\rplbrkaz.dll
O20 - Winlogon Notify: ssqrq - C:\WINDOWS\system32\ssqrq.dll
O20 - Winlogon Notify: utfonmgk - C:\WINDOWS\SYSTEM32\utfonmgk.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: Microsoft Genuine Advantage - Unknown owner - C:\WINDOWS\system32\dllcache\winmga.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe

SmitFraudFix v2.202

Rapport fait à 19:10:24,04, 10/07/2007
Executé à partir de C:\Documents and Settings\Denis\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{689EB17E-B9ED-46C3-982E-9205D4DFB9E9}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\..\{689EB17E-B9ED-46C3-982E-9205D4DFB9E9}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS3\Services\Tcpip\..\{689EB17E-B9ED-46C3-982E-9205D4DFB9E9}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252

»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

A l'aide !!
Qu'est-ce que je fais de ce rapport Hijackthis ??

Merci pour votre réponse.

O2 - BHO: (no name) - {002F1260-A5B2-41D3-B260-A9C96060BA77} - C:\WINDOWS\system32\ssqrq.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\dkazqfmu.dll
O2 - BHO: (no name) - {F4002052-AB29-4B33-8C8D-0E99084564EC} - C:\WINDOWS\system32\jkkklll.dll
O20 - Winlogon Notify: agajiekq - C:\WINDOWS\SYSTEM32\agajiekq.dll
O20 - Winlogon Notify: dkazqfmu - C:\WINDOWS\SYSTEM32\dkazqfmu.dll
O20 - Winlogon Notify: jkkklll - C:\WINDOWS\SYSTEM32\jkkklll.dll
O20 - Winlogon Notify: nlrvyddm - C:\WINDOWS\SYSTEM32\nlrvyddm.dll
O20 - Winlogon Notify: pzentreb - C:\WINDOWS\SYSTEM32\pzentreb.dll
O20 - Winlogon Notify: rplbrkaz - C:\WINDOWS\SYSTEM32\rplbrkaz.dll
O20 - Winlogon Notify: ssqrq - C:\WINDOWS\system32\ssqrq.dll
O20 - Winlogon Notify: utfonmgk - C:\WINDOWS\SYSTEM32\utfonmgk.dll

ca c'est une infection vundo

-----------

comme navilog a bloqué sauvegarde un epu tes données car ton ordi est infecté et peut etre instable

---------
lance sophos antirootkit

http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html

---------

lance cwshredder (faire fix)

https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/27497.html
---------------

utilise aussi pour supprimer tes traces

CCLEANER: (lance un nettoyage et répare erreurs) sans la barre yahoo

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
---------------

désactive la restauration système pour purger les virus qui seraient dedans (dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre)

scan avec vundo

Téléchargez VundoFix -> http://www.atribune.org/ccount/click.php?id=4

Double cliquez VundoFix.exe pour l'exécuter.
Quand VundoFix s'ouvre, cliquez sur le bouton Scan for Vundo.
Une fois le scan fini, cliquez sur le bouton Remove Vundo.
Vous recevrez un avertissement vous demandant si vous voulez effacer ces
fichiers répondez en cliquant sur YES
Une fois que vous avez cliqué yes, votre bureau deviendra vide au moment où il
enlève Vundo.

Quand c'est fini, il vous sera demandé de redémarrer votre ordinateur, cliquez
OK.

puis :

virtumondebegone

http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

puis Symantec Vundo Remove Tool

https://www.broadcom.com/support/security-center

et

https://www.broadcom.com/support/security-center

--------------

AVG antispyxare

https://www.01net.com/telecharger/

Tuto :
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

->Relance AVG AS -> "Analyse" ->"Paramètres"

Sous la question "Comment réagir ?" :

-> clique sur "Actions recommandées" et choisis "Quarantaines"
-> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

Si un fichier est infecté en fin d'analyse

->Clique sur "Appliquer toutes les actions "

->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous".

->Enregistre ce fichier texte sur ton bureau ensuite colle le rapport ici

---------------------
colle le rapport d'un scan en ligne
avec un des suivants:

bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html

Panda en ligne :
http://pandasoftware.fr

---------

recolle un rapport hijackthis pour controler

si je ne peux te repondre et qu'il y a encore des pub comme tu n'a pas pu faire navilog fait la deuxieme methode indiquée

popups ouverture de fenetres internet publicitaires pop up

merci pour ta réponse.

Je dois faire tout ça !!! ??

Ca bloque déjà avec le scan de Sophos anti-Rootkit qui s'arrête à l'examen des clés de la base de registre.
Par contre , le scan du disque dur fonctionne.

puis j'enchaine avec la suite et je vous tiens au courant.

oui tout car beaucoup d'infection vundo

si sopho bloque tu pourra le lancer en mode sans echec en demarrant ton ordi en tapant F8

Bonjour,

Ouf !! j'ai fait tout ce que tu m'as dit. Tous les scans se sont déroulés jusqu'au bout
après une vingtaine d'heures de boulot ( au moins).
Il y avait pleins de troyens partout.

Je suis inquiet, car ils n'ont pas tous été détruits.
( Bitdefender a détecté Trojan.FakeAlert.GY, mais n'a pas réussi ni à nettoyer
les 5 fichiers infectés, ni même à les détruire !!)

Le pc me semble toujours aussi lent.

Qu'en penses-tu ?
Merci pour ton aide. C'est vraiment sympa de m'accorder de ton temps.

Suivent les rapports de AVG AS, puis de BitDefender, puis de Hijackthis.

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 22:41:25 11/07/2007

+ Résultat de l'analyse:

C:\VundoFix Backups\sstqq.dll.bad -> Adware.Virtumonde : Nettoyé.
C:\RECYCLER\S-1-5-21-3723271197-1809067083-516276246-1009\Dc1553.zip/imagem1090.exe -> Downloader.Dadobra.mp : Nettoyé.
C:\RECYCLER\S-1-5-21-3723271197-1809067083-516276246-1009\Dc1627.zip/ref92302.exe -> Downloader.Dadobra.mp : Nettoyé.
:mozilla.132:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.133:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.134:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.135:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.136:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.137:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.20:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.221:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.222:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.223:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.224:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.225:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.228:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.229:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.230:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.231:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.232:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.234:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.27:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.28:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.29:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.30:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.31:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.327:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.32:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.338:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.33:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.34:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.35:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.36:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.441:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.46:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.47:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.48:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.49:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.50:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.51:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.52:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.53:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.54:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.557:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.55:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.562:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.56:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.57:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.58:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.59:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.60:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.61:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.62:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@msnaccountservices.112.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@msninvite.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@msnlivefavorites.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@112.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.145:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.146:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.379:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.380:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.381:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@ads.addynamix[2].txt -> TrackingCookie.Addynamix : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@admarketplace[2].txt -> TrackingCookie.Admarketplace : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@admarketplace[1].txt -> TrackingCookie.Admarketplace : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@admarketplace[1].txt -> TrackingCookie.Admarketplace : Nettoyé.
:mozilla.739:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Adobe : Nettoyé.
:mozilla.763:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Adobe : Nettoyé.
:mozilla.764:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Adobe : Nettoyé.
:mozilla.765:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Adobe : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@www.adobe[2].txt -> TrackingCookie.Adobe : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@www.adobe[2].txt -> TrackingCookie.Adobe : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.21:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.22:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.26:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.27:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.6:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.7:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.85:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.86:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.288:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.289:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.290:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.291:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.26:C:\Documents and Settings\Denis\Application Data\Mozilla\Firefox\Profiles\zdrys25z.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.93:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Denis\Cookies\denis@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.19:C:\Documents and Settings\Denis\Application Data\Mozilla\Firefox\Profiles\zdrys25z.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.249:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Denis\Cookies\denis@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@iv2.bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@burstnet[2].txt -> TrackingCookie.Burstnet : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@casalemedia[2].txt -> TrackingCookie.Casalemedia : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@casalemedia[1].txt -> TrackingCookie.Casalemedia : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@casalemedia[1].txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.708:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Casinotropez : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@promo.casinotropez[1].txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.13:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.413:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@com[1].txt -> TrackingCookie.Com : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@com[2].txt -> TrackingCookie.Com : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@com[2].txt -> TrackingCookie.Com : Nettoyé.
:mozilla.166:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.167:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.168:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.699:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.700:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.701:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.702:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.703:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@connextra[2].txt -> TrackingCookie.Connextra : Nettoyé.
:mozilla.460:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.
:mozilla.15:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.18:C:\Documents and Settings\Denis\Application Data\Mozilla\Firefox\Profiles\zdrys25z.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.41:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.69:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.16:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.293:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.50:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.149:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.25:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.28:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.30:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.383:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.10:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.11:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.12:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.177:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.8:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.9:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@as1.falkag[2].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@as1.falkag[2].txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.164:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.32:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.34:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.158:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.251:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.253:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@ehg-tiscover.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@counter2.hitslink[2].txt -> TrackingCookie.Hitslink : Nettoyé.
:mozilla.28:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.29:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.334:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.335:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.355:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.356:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@ilead.itrack[1].txt -> TrackingCookie.Itrack : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@ilead.itrack[2].txt -> TrackingCookie.Itrack : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@ilead.itrack[1].txt -> TrackingCookie.Itrack : Nettoyé.
:mozilla.360:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Ivwbox : Nettoyé.
:mozilla.521:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Ivwbox : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@ivwbox[2].txt -> TrackingCookie.Ivwbox : Nettoyé.
:mozilla.735:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
:mozilla.736:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
:mozilla.737:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
:mozilla.738:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
:mozilla.739:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
:mozilla.740:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
:mozilla.741:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@search.live[2].txt -> TrackingCookie.Live : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@search.live[2].txt -> TrackingCookie.Live : Nettoyé.
:mozilla.152:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.155:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.19:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.20:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@ie.search.msn[2].txt -> TrackingCookie.Msn : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@search.msn[2].txt -> TrackingCookie.Msn : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@search.msn[2].txt -> TrackingCookie.Msn : Nettoyé.
:mozilla.616:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@oewabox[1].txt -> TrackingCookie.Oewabox : Nettoyé.
:mozilla.721:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Onestat : Nettoyé.
:mozilla.722:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Onestat : Nettoyé.
:mozilla.723:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Onestat : Nettoyé.
:mozilla.724:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Onestat : Nettoyé.
:mozilla.725:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Onestat : Nettoyé.
:mozilla.726:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Onestat : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@stat.onestat[2].txt -> TrackingCookie.Onestat : Nettoyé.
:mozilla.195:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.197:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.449:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.450:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.451:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@overture[2].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@perf.overture[1].txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.193:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Paycounter : Nettoyé.
:mozilla.38:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Paycounter : Nettoyé.
:mozilla.270:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Paypal : Nettoyé.
:mozilla.817:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Paypal : Nettoyé.
:mozilla.386:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.387:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.388:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.389:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.371:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.372:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@guide.real[1].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@real[2].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@real[2].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@guide.real[2].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@real[1].txt -> TrackingCookie.Real : Nettoyé.
:mozilla.523:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.524:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.525:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.526:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.594:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.595:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.596:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@realmedia[2].txt -> TrackingCookie.Realmedia : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@realmedia[1].txt -> TrackingCookie.Realmedia : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@realmedia[1].txt -> TrackingCookie.Realmedia : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@revenue[2].txt -> TrackingCookie.Revenue : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@revenue[1].txt -> TrackingCookie.Revenue : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@revenue[2].txt -> TrackingCookie.Revenue : Nettoyé.
:mozilla.121:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.122:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.123:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.39:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.40:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@revsci[2].txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@revsci[1].txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.206:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.337:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.338:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.339:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.340:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.341:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.342:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.538:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.539:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.540:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.541:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.542:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@seznam[1].txt -> TrackingCookie.Seznam : Nettoyé.
:mozilla.676:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.328:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Skype : Nettoyé.
:mozilla.329:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Skype : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@skype[1].txt -> TrackingCookie.Skype : Nettoyé.
:mozilla.10:C:\Documents and Settings\Denis\Application Data\Mozilla\Firefox\Profiles\zdrys25z.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.117:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.118:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.119:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.11:C:\Documents and Settings\Denis\Application Data\Mozilla\Firefox\Profiles\zdrys25z.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.11:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.120:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.12:C:\Documents and Settings\Denis\Application Data\Mozilla\Firefox\Profiles\zdrys25z.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.12:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.13:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.33:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.66:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.67:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.68:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.572:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.573:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.574:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.575:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Specificclick : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@specificclick[2].txt -> TrackingCookie.Specificclick : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@specificclick[1].txt -> TrackingCookie.Specificclick : Nettoyé.
:mozilla.145:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.146:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.620:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.621:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@tacoda[1].txt -> TrackingCookie.Tacoda : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@tacoda[1].txt -> TrackingCookie.Tacoda : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@tacoda[1].txt -> TrackingCookie.Tacoda : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@targetnet[2].txt -> TrackingCookie.Targetnet : Nettoyé.
:mozilla.92:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@trafficmp[2].txt -> TrackingCookie.Trafficmp : Nettoyé.
:mozilla.602:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.638:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.597:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Valuead : Nettoyé.
:mozilla.598:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Valuead : Nettoyé.
:mozilla.599:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Valuead : Nettoyé.
:mozilla.600:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Valuead : Nettoyé.
:mozilla.601:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Valuead : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@reduxads.valuead[1].txt -> TrackingCookie.Valuead : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@pr.valueclick[1].txt -> TrackingCookie.Valueclick : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@valueclick[2].txt -> TrackingCookie.Valueclick : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@valueclick[3].txt -> TrackingCookie.Valueclick : Nettoyé.
:mozilla.42:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.43:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.44:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Profiles\default\6trrkvuc.slt\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.633:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.634:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.635:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.6:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.7:C:\Documents and Settings\Denis\Application Data\Mozilla\Firefox\Profiles\zdrys25z.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.7:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.8:C:\Documents and Settings\Denis\Application Data\Mozilla\Firefox\Profiles\zdrys25z.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.8:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.9:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@wreport.weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.703:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.720:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\essai\Cookies\essai@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.658:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Yadro : Nettoyé.
:mozilla.10:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.13:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.14:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.150:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.151:C:\Documents and Settings\Emmanuel\Application Data\Mozilla\Firefox\Profiles\rbuk6i64.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.15:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.24:C:\Documents and Settings\Hélène\Application Data\Mozilla\Firefox\Profiles\p2no0ico.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.79:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.80:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.81:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.87:C:\Documents and Settings\Camille\Application Data\Mozilla\Firefox\Profiles\3s3e2c1x.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Camille\Cookies\camille@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.
C:\Documents and Settings\Emmanuel\Cookies\emmanuel@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.
C:\Documents and Settings\Hélène\Cookies\hélène@zedo[2].txt -> TrackingCookie.Zedo : Nettoyé.
C:\Program Files\Dassault Systemes\B13\intel_a\resources\msgcatalog\German\CATMMediaCaptureSizeDialog.CATNls -> Trojan.Runner.i : Nettoyé.

Fin du rapport

----------------------------------------------------------------------------

BitDefender Online Scanner - Rapport virus en temps réel

Généré à: Thu, Jul 12, 2007 - 15:10:50

Info d'analyse

Fichiers scannés 825194
Infectés Fichiers 12
Virus Détectés Trojan.FakeAlert.GY 8
MemScan:Trojan.Virtumod.AMA 2
Trojan.Spy.VBStat.B 1
Trojan.Downloader.WMA.Wimad.D 1

--------------------------------------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 15:34:32, on 12/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\RSS Xpress\RSS Xpress.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {1B50E45C-EEE5-4DBA-9B61-2ABD0F8F10D1} - C:\WINDOWS\system32\ssqrq.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\pzentreb.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Security Toolbar - {11A69AE4-FBED-4832-A2BF-45AF82825583} - C:\WINDOWS\system32\pzentreb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [RSS Xpress] C:\Program Files\RSS Xpress\RSS Xpress.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - http://components.viewpoint.com/...
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {86992E9F-0414-40FD-B586-0E782A613504} - http://cpimg.msnplus.co.kr/_Download/ActiveX/WPCPackInstaller.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-

ijackthis est incomplet...

____________
fait virtumonde en mode sans echec
virtumondebegone

http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

puis Symantec Vundo Remove Tool en mode sans echec

https://www.broadcom.com/support/security-center

-----------
telecharge bitdefender free et scan avec en mode sans echec (mettre a jour avant)

https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/29063.html

------------

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

-------------
# Téléchargez clean.zip,

http://www.malekal.com/download/clean.zip

décompressez-le sur votre bureau (clic droit / extraire tout), vous obtenez alors un dossier clean

# Démarrez Windows en mode sans échec (demarrer en appuayant sur F8)
# Ouvrez le dossier clean qui se trouve sur ton bureau, et double-cliquez sur clean.cmd, une fenêtre noire va apparaître pendant un instant, laissez la ouverte jusqu'à ce qu'elle se ferme.

recolle hijackthis
------------

Bonjour, merci pour ta réponse rapide :

Ca n'a pas l'air de s'arranger.
Est-ce que je ne gagnerais pas du temps à formater le disque dur !!!
au point où j'en suis ??

voici le rapport hijackthis complet :

Logfile of HijackThis v1.99.1
Scan saved at 18:02:59, on 10/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\RSS Xpress\RSS Xpress.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hijackthis\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {002F1260-A5B2-41D3-B260-A9C96060BA77} - C:\WINDOWS\system32\ssqrq.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\dkazqfmu.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: (no name) - {F4002052-AB29-4B33-8C8D-0E99084564EC} - C:\WINDOWS\system32\jkkklll.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Security Toolbar - {11A69AE4-FBED-4832-A2BF-45AF82825583} - C:\WINDOWS\system32\pzentreb.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKCU\..\Run: [RSS Xpress] C:\Program Files\RSS Xpress\RSS Xpress.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - http://components.viewpoint.com/...
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {86992E9F-0414-40FD-B586-0E782A613504} - http://cpimg.msnplus.co.kr/_Download/ActiveX/WPCPackInstaller.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: agajiekq - C:\WINDOWS\SYSTEM32\agajiekq.dll
O20 - Winlogon Notify: dkazqfmu - C:\WINDOWS\SYSTEM32\dkazqfmu.dll
O20 - Winlogon Notify: jkkklll - C:\WINDOWS\SYSTEM32\jkkklll.dll
O20 - Winlogon Notify: nlrvyddm - C:\WINDOWS\SYSTEM32\nlrvyddm.dll
O20 - Winlogon Notify: pzentreb - C:\WINDOWS\SYSTEM32\pzentreb.dll
O20 - Winlogon Notify: rplbrkaz - C:\WINDOWS\SYSTEM32\rplbrkaz.dll
O20 - Winlogon Notify: ssqrq - C:\WINDOWS\system32\ssqrq.dll
O20 - Winlogon Notify: utfonmgk - C:\WINDOWS\SYSTEM32\utfonmgk.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: Microsoft Genuine Advantage - Unknown owner - C:\WINDOWS\system32\dllcache\winmga.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe

c'est sur que su t'y connais le formatage prendra5 ou 6 heures (pense a enregistrer toutes tes donnée pour tout reinstaller , ainsi que pilotes.....)

http://www.depannetonpc.net/fiches-pratiques/lire_31_1_formater-et-reinstaller-windows.html

-------------

alors que la desinfection prendra je ne sais combien de temps

a toi de voir!!!!

______________
tu as bien fait tout ca? refait bien dans l'orde (si tu l'as fait fait ceux qui trouvait des vundo dans les 4 suivants)

scan avec vundo

Téléchargez VundoFix -> http://www.atribune.org/ccount/click.php?id=4

Double cliquez VundoFix.exe pour l'exécuter.
Quand VundoFix s'ouvre, cliquez sur le bouton Scan for Vundo.
Une fois le scan fini, cliquez sur le bouton Remove Vundo.
Vous recevrez un avertissement vous demandant si vous voulez effacer ces
fichiers répondez en cliquant sur YES
Une fois que vous avez cliqué yes, votre bureau deviendra vide au moment où il
enlève Vundo.

Quand c'est fini, il vous sera demandé de redémarrer votre ordinateur, cliquez
OK.

puis :

virtumondebegone en mode san echec

http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

puis Symantec Vundo Remove Tool en mode sans echec

https://www.broadcom.com/support/security-center

et
en mode sans echec

https://www.broadcom.com/support/security-center

--------------------
COMBOFIX
lance combofix a enregistrer uniquement sur le bureau

http://mickael.barroux.free.fr/securite/combofix.php

---------------

lance CCLEANER et nettoie et repare les erreurs

----------------
telecharge bitdefender free et scan avec en mode sans echec (mettre a jour avant)

https://www.01net.com/

------------

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

-------------
# Téléchargez clean.zip,

http://www.malekal.com/download/clean.zip

décompressez-le sur votre bureau (clic droit / extraire tout), vous obtenez alors un dossier clean

# Démarrez Windows en mode sans échec (demarrer en appuayant sur F8)
# Ouvrez le dossier clean qui se trouve sur ton bureau, et double-cliquez sur clean.cmd, une fenêtre noire va apparaître pendant un instant, laissez la ouverte jusqu'à ce qu'elle se ferme.
-------------

recolle un rapport hijackthis

Bonjour,

j'ai donc effectué tout ce que tu m'as dit, mais il a été impossible de
lancer BitDefender en mode sans echec. Par contre, en mode normal il a fonctionné
et éliminé plusieurs fichiers contenant des troyens.

voici les rapports SDFix, Clean et Hijackthis.

Le pc me semble plus rapide ... espoir ...

Merci de m'aider.

=======================================================================================

SDFix: Version 1.90

Run by Denis on 13/07/2007 at 09:28

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:

Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Missing Security Center Service
Restoring Missing SharedAccess Service

Rebooting...

Normal Mode:
Checking Files:

Trojan Files Found:

C:\Program Files\Setup.exe - Deleted
C:\WINDOWS\system32\1.tmp - Deleted
C:\WINDOWS\system32\1.tmp - Deleted

Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.

Final Check:

Remaining Services:
------------------

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Morpheus\\Morpheus.exe"="C:\\Program Files\\Morpheus\\Morpheus.exe:*:Enabled:M5Shell"
"C:\\Program Files\\Dassault Systemes\\B13\\intel_a\\code\\bin\\CNEXT.exe"="C:\\Program Files\\Dassault Systemes\\B13\\intel_a\\code\\bin\\CNEXT.exe:*:Disabled:CATIA"
"C:\\Program Files\\EasyPHP1-7\\apache\\apache.exe"="C:\\Program Files\\EasyPHP1-7\\apache\\apache.exe:*:Enabled:apache"
"C:\\WINDOWS\\system32\\mmc.exe"="C:\\WINDOWS\\system32\\mmc.exe:*:Disabled:Microsoft Management Console"
"C:\\Program Files\\EA GAMES\\Battlefield Vietnam\\bfvietnam.exe"="C:\\Program Files\\EA GAMES\\Battlefield Vietnam\\bfvietnam.exe:*:Disabled:bfvietnam"
"C:\\Program Files\\Ubisoft\\Splinter Cell Pandora Tomorrow\\pandora.exe"="C:\\Program Files\\Ubisoft\\Splinter Cell Pandora Tomorrow\\pandora.exe:*:Enabled:pandora"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\batoukaboulaba\\counter-strike source\\hl2.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\batoukaboulaba\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\taetan\\counter-strike\\hl.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\taetan\\counter-strike\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\NetMeeting\\conf.exe"="C:\\Program Files\\NetMeeting\\conf.exe:*:Enabled:Windows© NetMeeting©"
"C:\\WINDOWS\\system32\\rtcshare.exe"="C:\\WINDOWS\\system32\\rtcshare.exe:*:Enabled:Partage de l'application RTC"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Disabled:Firefox"
"C:\\Program Files\\FileZilla\\FileZilla.exe"="C:\\Program Files\\FileZilla\\FileZilla.exe:*:Enabled:FileZilla"
"C:\\Program Files\\MyFreeTV\\MyFreeTV.exe"="C:\\Program Files\\MyFreeTV\\MyFreeTV.exe:*:Enabled:MyFreeTV"
"C:\\Program Files\\mozilla.org\\Mozilla\\mozilla.exe"="C:\\Program Files\\mozilla.org\\Mozilla\\mozilla.exe:*:Enabled:Mozilla"
"C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat"="C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat:*:Enabled:La Bataille pour la Terre du Milieu T II"
"C:\\Program Files\\Atari\\Act of War - Direct Action\\fpupdate.exe"="C:\\Program Files\\Atari\\Act of War - Direct Action\\fpupdate.exe:*:Enabled:fpupdate"
"C:\\Program Files\\Atari\\Act of War - Direct Action\\ACTOFWAR.EXE"="C:\\Program Files\\Atari\\Act of War - Direct Action\\ACTOFWAR.EXE:*:Enabled:ACTOFWAR"
"C:\\Program Files\\World of Warcraft\\WoW-1.12.0-frFR-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-1.12.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\World of Warcraft\\WoW-1.12.0.5595-to-1.12.1.5875-frFR-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-1.12.0.5595-to-1.12.1.5875-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\World of Warcraft\\BackgroundDownloader.exe"="C:\\Program Files\\World of Warcraft\\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\World of Warcraft\\WoW-1.12.x-to-2.0.1-frFR-patch-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-1.12.x-to-2.0.1-frFR-patch-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\World of Warcraft\\WoW-2.0.3-frFR-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-2.0.3-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\World of Warcraft\\WoW-2.0.4.6314-to-2.0.5.6320-frFR-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-2.0.4.6314-to-2.0.5.6320-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\World of Warcraft\\WoW-2.0.5.6320-to-2.0.6.6337-frFR-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-2.0.5.6320-to-2.0.6.6337-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Shareaza\\Shareaza.exe"="C:\\Program Files\\Shareaza\\Shareaza.exe:*:Enabled:Shareaza"
"C:\\Program Files\\Ascaron Entertainment\\Sacred\\sacred.exe"="C:\\Program Files\\Ascaron Entertainment\\Sacred\\sacred.exe:*:Enabled:Sacred"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"Z:\\Program Files\\JAlbum7.1\\JAlbumWin.exe"="Z:\\Program Files\\JAlbum7.1\\JAlbumWin.exe:*:Enabled:JAlbumWin"
"C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\helpctr.exe"="C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\helpctr.exe:*:Enabled:Assistance … distance - Windows Messenger et voix"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files:
---------------

Backups Folder: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

C:\Documents and Settings\Camille\Local Settings\Application Data\Microsoft\Messenger\camiamia@hotmail.fr\Sharing Folders\diddl_pimboli247@hotmail.com\Derniers jours de cours\Thumbs.db
C:\Documents and Settings\Camille\Local Settings\Application Data\Microsoft\Messenger\camiamia@hotmail.fr\Sharing Folders\popox91@passport.com\Thumbs.db
C:\Documents and Settings\Camille\Local Settings\Application Data\Microsoft\Messenger\heleneroquet@hotmail.com\Sharing Folders\joonasnas@hotmail.fr\cremaillere\Thumbs.db
C:\Documents and Settings\Camille\Local Settings\Application Data\Microsoft\Messenger\heleneroquet@hotmail.com\Sharing Folders\lestwins24@hotmail.com\cremaillere\Thumbs.db
C:\Documents and Settings\Camille\Local Settings\Application Data\Microsoft\Messenger\heleneroquet@hotmail.com\Sharing Folders\lestwins24@hotmail.com\Tampon\Thumbs.db
C:\Documents and Settings\H‚lŠne\Local Settings\Application Data\Microsoft\Messenger\heleneroquet@hotmail.com\Sharing Folders\be_in@hotmail.fr\Thumbs.db
C:\Documents and Settings\H‚lŠne\Local Settings\Application Data\Microsoft\Messenger\heleneroquet@hotmail.com\Sharing Folders\joonasnas@hotmail.fr\cremaillere\Thumbs.db
C:\Documents and Settings\H‚lŠne\Local Settings\Application Data\Microsoft\Messenger\heleneroquet@hotmail.com\Sharing Folders\lestwins24@hotmail.com\cremaillere\Thumbs.db
C:\Documents and Settings\H‚lŠne\Local Settings\Application Data\Microsoft\Messenger\heleneroquet@hotmail.com\Sharing Folders\lestwins24@hotmail.com\Tampon\Thumbs.db
C:\Documents and Settings\H‚lŠne\Local Settings\Application Data\Microsoft\Messenger\heleneroquet@hotmail.com\Sharing Folders\s-sabine@hotmail.fr\Tampon\Thumbs.db
C:\Documents and Settings\H‚lŠne\Local Settings\Application Data\Microsoft\Messenger\heleneroquet@hotmail.com\Sharing Folders\wombat_20@hotmail.fr\Thumbs.db
C:\WINDOWS\system32\agajiekq.dllbox
C:\WINDOWS\system32\dkazqfmu.dllbox
C:\WINDOWS\system32\nlrvyddm.dllbox
C:\WINDOWS\system32\pzentreb.dllbox
C:\WINDOWS\system32\rplbrkaz.dllbox
C:\WINDOWS\system32\soyfbxxe.dllbox
C:\WINDOWS\system32\utfonmgk.dllbox
C:\xdwfao30.sys
C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp
C:\Program Files\InterActual\InterActual Player\iti18.tmp

Finished

==========================================================================================================

Script execute en mode sans echec
Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec 13/07/2007 a 9:58:20,01

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:
tentative de suppression de C:\setup.exe

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32
tentative de suppression de C:\WINDOWS\install.exe
tentative de suppression de C:\WINDOWS\system32\mcrh.tmp
tentative de suppression de "C:\WINDOWS\Downloaded Program Files\CONFLICT.1"

*** Suppression des fichiers dans C:\Program Files
tentative de suppression de "C:\Program Files\Viewpoint\"

*** Suppression des clefs du registre effectuee..
*** Fin du rapport !

========================================================================================================

Logfile of HijackThis v1.99.1
Scan saved at 10:11:29, on 13/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Softwin\BitDefender8\bdmcon.exe
C:\Program Files\Softwin\BitDefender8\bdnagent.exe
C:\Program Files\RSS Xpress\RSS Xpress.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {1B50E45C-EEE5-4DBA-9B61-2ABD0F8F10D1} - C:\WINDOWS\system32\ssqrq.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\soyfbxxe.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Security Toolbar - {11A69AE4-FBED-4832-A2BF-45AF82825583} - C:\WINDOWS\system32\soyfbxxe.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender8\bdmcon.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe"
O4 - HKCU\..\Run: [RSS Xpress] C:\Program Files\RSS Xpress\RSS Xpress.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - http://components.viewpoint.com/...
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {86992E9F-0414-40FD-B586-0E782A613504} - http://cpimg.msnplus.co.kr/_Download/ActiveX/WPCPackInstaller.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: agajiekq - agajiekq.dll (file missing)
O20 - Winlogon Notify: dkazqfmu - dkazqfmu.dll (file missing)
O20 - Winlogon Notify: nlrvyddm - nlrvyddm.dll (file missing)
O20 - Winlogon Notify: soyfbxxe - soyfbxxe.dll (file missing)
O20 - Winlogon Notify: utfonmgk - utfonmgk.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: Microsoft Genuine Advantage - Unknown owner - C:\WINDOWS\system32\dllcache\winmga.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

O20 - Winlogon Notify: agajiekq - agajiekq.dll (file missing)
O20 - Winlogon Notify: dkazqfmu - dkazqfmu.dll (file missing)
O20 - Winlogon Notify: nlrvyddm - nlrvyddm.dll (file missing)
O20 - Winlogon Notify: soyfbxxe - soyfbxxe.dll (file missing)
O20 - Winlogon Notify: utfonmgk - utfonmgk.dll (file missing)

O2 - BHO: (no name) - {1B50E45C-EEE5-4DBA-9B61-2ABD0F8F10D1} - C:\WINDOWS\system32\ssqrq.dll (file missing)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\soyfbxxe.dll (file missing)

O3 - Toolbar: Security Toolbar - {11A69AE4-FBED-4832-A2BF-45AF82825583} - C:\WINDOWS\system32\soyfbxxe.dll (file missing)

tu peux fixer ca avec hijackthis

----------------

qu'as trouvé bitdefender : tu peux me donner le rapport des infections trouvées et de qui aa été fait?

--------
recolle ensuite hijackthis

Je ne retrouve pas le rapport BitDefender ?!! . Par contre j'avais noté le résultat à la main :

Trojan.FakeAlert.GY

fichiers infectés :
C:\WINDOWS\system32\agajiekq.dll
C:\WINDOWS\system32\dkazqfmu.dll
C:\WINDOWS\system32\nlrvyddm.dll
C:\WINDOWS\system32\pzentred.dll
C:\WINDOWS\system32\soyfbxxe.dll
C:\WINDOWS\system32\utfonmgk.dll

pour ces 6 fichiers, il indiquait :
Echec de la désinfection
Echec de la suppression

et pourtant le lendemain , ces fichiers n'étaient plus là. ?? magie ?

=======================================================================

Logfile of HijackThis v1.99.1
Scan saved at 12:55:49, on 13/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Softwin\BitDefender8\bdnagent.exe
C:\Program Files\RSS Xpress\RSS Xpress.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe"
O4 - HKCU\..\Run: [RSS Xpress] C:\Program Files\RSS Xpress\RSS Xpress.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - http://components.viewpoint.com/...
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {86992E9F-0414-40FD-B586-0E782A613504} - http://cpimg.msnplus.co.kr/_Download/ActiveX/WPCPackInstaller.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: Microsoft Genuine Advantage - Unknown owner - C:\WINDOWS\system32\dllcache\winmga.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

jlpjlp,

Je dois m'absenter pour 12 jours.
Je ne répondrai plus à tes messages pendant ce temps.
La désinfection a l'air de plutôt bien se passer.
Le pc a retrouvé une vitesse acceptable.
Y-a-t'il autre chose à faire ?
je le ferai quand je rentrerai.

Merci pour ton aide, j'étais vraiment inquiet et je ne voyais pas d'autre solution que le formatage complet du disque.

A +.

ca a li'air bon je vais regarder ce soir ton hijackthis lus en profondeur

si u as le temps tu peux refaire un scan en ligne pour oivr le rapport

bonnes vacances!!

Trojan.FakeAlert.GY

fichiers infectés :
C:\WINDOWS\system32\agajiekq.dll
C:\WINDOWS\system32\dkazqfmu.dll
C:\WINDOWS\system32\nlrvyddm.dll
C:\WINDOWS\system32\pzentred.dll
C:\WINDOWS\system32\soyfbxxe.dll
C:\WINDOWS\system32\utfonmgk.dll

pour ces 6 fichiers, il indiquait :
Echec de la désinfection
Echec de la suppression

et pourtant le lendemain , ces fichiers n'étaient plus là. ?? magie ?

tu avais peut etre fait le scan avant sdfix, clean...
car apres dans hijackthis:

O20 - Winlogon Notify: agajiekq - agajiekq.dll (file missing)
O20 - Winlogon Notify: dkazqfmu - dkazqfmu.dll (file missing)
O20 - Winlogon Notify: nlrvyddm - nlrvyddm.dll (file missing)
O20 - Winlogon Notify: soyfbxxe - soyfbxxe.dll (file missing)
O20 - Winlogon Notify: utfonmgk - utfonmgk.dll (file missing)

____________________________________________________________________

sauf ca
C:\WINDOWS\system32\pzentred.dll

donc juste par précaution

refait navilog svp

télécharger sur le bureau
Navilog.zip
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

= Double-Clic navilog1.zip
= Extraire tout sur le bureau
= Double-Clic navilog1 qui est sur le bureau
= Appuyer sur une touche jusqu' arriver aux options
= Choisir option 1

puis

panda antirootkit

https://www.zdnet.fr/telecharger/logiciel/panda-free-antivirus-39647425s.htm

relance combofix et colle le rapport

http://mickael.barroux.free.fr/securite/combofix.php

relance CCLEANER nettoie puis repare 4 fois les erreurs

_____________________________________________________________________________________

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

fix ces lignes au dessus

___________________________________________________________________________
encore des pb (pubs? blocage?.........

____________________________________________________________________________

recolle hijackthis

Coucou me revoilou,

c'est reparti pour un petit tour d'antivirus :

- Navilog : rien détecté
- panda antirootkit : rien détecté

- Combofix : impossible à lancer : déclenchement d'une RunTime error !!!

- CCleaner : OK

Le pc semble avoir une vitesse normale. Pas de fenetre intempestive ni barre d'outil non-désirée.

Merci pour ta patience.

=================================================================================

- rapport HIjackthis :

Logfile of HijackThis v1.99.1
Scan saved at 09:51:40, on 26/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Softwin\BitDefender8\bdnagent.exe
C:\Program Files\RSS Xpress\RSS Xpress.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe"
O4 - HKCU\..\Run: [RSS Xpress] C:\Program Files\RSS Xpress\RSS Xpress.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} - http://components.viewpoint.com/...
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {86992E9F-0414-40FD-B586-0E782A613504} - http://cpimg.msnplus.co.kr/_Download/ActiveX/WPCPackInstaller.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Program Files\Dassault Systemes\B13\intel_a\code\bin\CATSysDemon.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: Microsoft Genuine Advantage - Unknown owner - C:\WINDOWS\system32\dllcache\winmga.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

ca a l'air bon

pour proteger ton ordi en se basant sur F SECURE que tu as

securite

mettre un antivirus donc F SECURE

-------------
des anti-espions: en plus de F SECURE car peu efficace

AD AWARE + SPYBOT
+
SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

--------
un pare feu : donc F SECURE

-----------

CCLEANER pour effacer les traces de surf

bonne continuation

OK, merci pour les conseils.
C'est vraiment super que des gens comme vous consacrent du temps à dépanner les autres.

Encore merci pour tout.

ok

une derniere precision et c'est bon

désactive la restauration système pour purger les virus qui seraient dedans puis réactive là (dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre)
------------------