Prob "Systeme Alert: Malware threats"

papro info Messages postés 70 Statut Membre -  
papro info Messages postés 70 Statut Membre -
bonjours tout le monde,

je suis tout nouveau sur le site et j'aurai besoin d'un bon coup de main pour me défaire de ce virus.
Comme le montre mon pseudo je ne suis pas un pro de l'info lol.

j'ai une icone en bas qui clignote(triangle jaune avec un point de suspension noir) et le message "System Alert: Malware threats"

j'ai vu que je n'était pas le seul et qu'il faut poser ce rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:10:22, on 03/09/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Video ActiveX Access\iesmn.exe
C:\Program Files\Video ActiveX Access\imsmain.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Video ActiveX Access\imsmn.exe
C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE
C:\Program Files\Video ActiveX Access\iesmin.exe
C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
C:\WINDOWS\AutoFlip.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\VirusProtectPro 3.7\VirusProtectPro 3.7.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\System32\gearsec.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Video ActiveX Access\iesmin.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
C:\Program Files\Video ActiveX Access\iesmin.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Video ActiveX Access\iesmin.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Documents and Settings\jerome\Local Settings\Temp\Répertoire temporaire 1 pour HiJackThis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWay Search Assistant BHO - {04079851-5845-4dea-848C-3ECD647AA554} - C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: (no name) - {1C3C4699-B285-475F-BE47-0B26088CE876} - C:\Program Files\Video ActiveX Access\iesplg.dll
O2 - BHO: (no name) - {47B83D78-F986-4E96-9769-2C55EF14DA0B} - C:\WINDOWS\System32\__c0011A89.dat
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: Protection Bar - {F06E2ABE-3A50-4079-BE25-FC100D9EAA25} - C:\Program Files\Video ActiveX Access\iesbpl.dll
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\av_fw\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\System32\per.exe internat.dll,LoadKeyboardProfile
O4 - HKLM\..\Run: [hgqhp.exe] C:\WINDOWS\System32\hgqhp.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RunFlip] C:\WINDOWS\RunFlip.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE NoteCam Direct 300
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [TransVente] C:\PROGRA~1\TRANSV~1\TransVente.exe 1
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [Instant Access] C:\WINDOWS\System32\prodsrvs.exe /res
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKLM\..\Policies\Explorer\Run: [user32.dll] C:\Program Files\Video ActiveX Access\iesmn.exe
O4 - HKLM\..\Policies\Explorer\Run: [rare] C:\Program Files\Video ActiveX Access\imsmain.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk142YYFR
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file://C:\Program Files\Magician's Handbook - Cursed Valley\Images\stg_drm.ocx
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15-3.cab
O16 - DPF: {321F38B6-7E5F-470E-B58C-927523B7AF92} - http://es6-scripts.dlv4.com/binaries/egaccess4/egaccess4_1069_em_XP.cab
O16 - DPF: {33331111-1111-1111-1111-611111193423} -
O16 - DPF: {33331111-1111-1111-1111-611111193429} -
O16 - DPF: {33331111-1111-1111-1111-615111193427} -
O16 - DPF: {33331111-1131-1111-1111-611111193428} -
O16 - DPF: {4F5E4276-C120-11D6-A1FD-00508B9D48EA} (dldisplay Class) - http://www.gamehouse.com/ghdlctl.cab
O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
O16 - DPF: {71DA2A4E-ACB3-4065-9E41-8BC42EABE427} - http://scripts.dlv4.com/binaries/IA/svcia32_FR_XP.cab
O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} - http://installs.hotbar.com/installs/hbtools/programs/4.8.4.0/hbtools.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AA59202C-5E41-48FC-AF7D-324F5FD6A9F1} - http://es6-scripts.dlv4.com/binaries/egaccess4/egaccess4_1070_em_XP.cab
O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file://C:\Program Files\Travelogue 360 - Rome\Images\armhelper.ocx
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/it/Woo2/fr/chat/nPaxChat.cab
O20 - AppInit_DLLs: C:\WINDOWS\System32\__c00D97AE.dat
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34546} - C:\WINDOWS\System32\vbsys2.dll (file missing)
O22 - SharedTaskScheduler: hyracina - {b36d60c8-e1ce-464e-b74c-8128a627ef56} - C:\WINDOWS\System32\vvihh.dll
O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - C:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Service de sécurité matérielle (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Windows Log - Unknown owner - C:\WINDOWS\system32\nvsvcd.exe (file missing)

--
End of file - 13253 bytes

merci d'avance pour l'aide que vous allez m'apporter!!!
Configuration: Windows XP
Internet Explorer 6.0

76 réponses

  • 1
  • 2
  • 3
  • 4
Résumé de la discussion

Le problème porte sur une alerte système signalant des menaces de malware accompagnée d'un log HijackThis détaillé sur Windows XP, révélant de nombreuses entrées suspectes et modules chargés au démarrage. Le fichier liste les processus et services montrant des programmes liés à MyWebSearch, Wanadoo et Securitoo, notamment des outils potentiellement indésirables, ainsi que des entrées Run et pilotes douteux. Plusieurs réponses évoquent l'exécution d'outils antivirus et antispyware, des tentatives de réinstallation et des questions sur la désinfection, signalant des difficultés liées à des objets système résiduels. En cas de persistance, l'analyse suggère que des composants DPF/ActiveX, des services et des entrées de démarrage restent actifs, rendant le nettoyage plus complexe et nécessitant une approche structurée.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. web66 Messages postés 147 Date d'inscription   Statut Membre 1
     
    bonsoir papro info,

    Telecharge, installe puis mets à jour ce logiciel(Ewido), une fois que c'est fait, fais un scan complet de ton système, supprime (delete) tout ce qu'il te trouve puis colle le rapport ici
    Ewido: (reste gratuit après la période d'essai)
    Ewido

    Puis scanne ton Pc avec ces deux atres logiciels et supprime ce qu'ils pourraient te trouver

    SpyBot-Search & Destroy: (gratuit)
    Spybot

    A² squared: (gratuit)
    A-squared
    0
  2. papro info Messages postés 70 Statut Membre
     
    salut web66,

    merci pour ta rapidité.
    je vé suivre tes conseils et je tient au courant.
    a+
    0
  3. papro info Messages postés 70 Statut Membre
     
    re web66,

    j'ai lancé l'analyse de mon ordi par Ewido qui s'appelle AVG apparament.(je suis pas spécialiste).
    ça fait déja 11 mn et je n'en suis qu'a 1/4 de l'analyse.
    je te dit a plus tard.
    0
  4. web66 Messages postés 147 Date d'inscription   Statut Membre 1
     
    ok

    a+
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. papro info Messages postés 70 Statut Membre
     
    me revoila,

    dis moi web 66 c normal que ça mette autant de temps a analysé jsui a + de 3heures 10 et + de 302 000 fichiers analysés est-ce que jme serai trompé? ou c bon?
    et apparament jsui a peine a la moitié de l'analyse!
    a+
    0
  7. web66 Messages postés 147 Date d'inscription   Statut Membre 1
     
    re

    comment 3 h 00 d'analyse et a peine a la moitié de l'analyse!, effectivement c'est long, tu as quel espace d'ocuppé sur ton DD ?

    a+

    0
  8. web66 Messages postés 147 Date d'inscription   Statut Membre 1
     
    bon je te laisse pour ce soir, laisse mouliner avg et fais la suite et poste les 3 rapports

    stp

    je serai en ligne demain matin

    bonne nuit
    0
  9. papro info Messages postés 70 Statut Membre
     
    bonjour web66,

    je suis matinal lol. ça y est c'est fini! mon DD est plein presque a déborder ,lol, taille 37,2 G il reste 171 MO. Va falloir que je face du tri ou augmenter ma memoire.

    je poste mon rapport d'avg

    --------------------------------------------------------
    AVG Anti-Spyware - Rapport d'analyse
    ---------------------------------------------------------

    + Créé à: 07:04:36 04/09/2007

    + Résultat de l'analyse:

    C:\WINDOWS\Downloaded Program Files\installer2.dll -> Adware.ClickMedia : Nettoyé.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Nettoyé.
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Nettoyé.
    HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Erreur lors du nettoyage.
    HKU\S-1-5-21-776561741-651377827-839522115-1004\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Nettoyé.
    C:\WINDOWS\Downloaded Program Files\HbInstIE.dll -> Adware.HotBar : Nettoyé.
    HKU\S-1-5-21-776561741-651377827-839522115-1004\Software\IST -> Adware.ISTBar : Nettoyé.
    C:\System Volume Information\_restore{D4BF10A2-C98F-4E92-B808-45FF027D1BF6}\RP376\A0092276.ini -> Adware.Qworke : Nettoyé.
    C:\Documents and Settings\jerome\Local Settings\Temporary Internet Files\Content.IE5\CDQJ6B49\ProfitvilleSetup-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Documents and Settings\jerome\Local Settings\Temporary Internet Files\Content.IE5\JJ91HD9M\AbraAcademySetup-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Documents and Settings\jerome\Local Settings\Temporary Internet Files\Content.IE5\NY3TX573\BBB-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\AbraAcademySetup-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\AladdinPinball_Setup_30m_FR-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\BBB-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\CakeManiaSetup-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\DinerDash2-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\MCFPrimeSuspects-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\ProfitvilleSetup-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\Shopmania-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\Shopmania-dm[2].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\TheDaVinciCode_Setup-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\Downloads\paparazzisetup-dm[1].exe -> Adware.Trymedia : Nettoyé.
    C:\WINDOWS\system32\svcia32.dll -> Dialer.Egroup : Nettoyé.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Instant Access -> Dialer.Generic : Nettoyé.
    HKU\S-1-5-21-776561741-651377827-839522115-1004\Software\egdhtml -> Dialer.Generic : Nettoyé.
    C:\WINDOWS\System32prosvsys.exe -> Dialer.InstantAccess.ai : Nettoyé.
    C:\WINDOWS\System32prodsrvs.exe -> Dialer.InstantAccess.ak : Nettoyé.
    C:\WINDOWS\Downloaded Program Files\UERSV_0001_N91S2108NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Nettoyé.
    C:\WINDOWS\Downloaded Program Files\UWA6PV_0001_N91M2107NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Nettoyé.
    :mozilla.596:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
    :mozilla.597:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
    :mozilla.598:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
    :mozilla.599:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
    :mozilla.600:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
    :mozilla.601:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
    :mozilla.493:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
    :mozilla.494:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
    :mozilla.496:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
    :mozilla.497:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
    :mozilla.498:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
    :mozilla.646:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@boonty.122.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@maisondevalerie.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@mistergooddeal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@notrefamille.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@redcats.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
    :mozilla.136:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
    :mozilla.137:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
    :mozilla.138:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
    :mozilla.139:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
    :mozilla.140:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
    :mozilla.141:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
    :mozilla.142:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
    :mozilla.396:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
    :mozilla.397:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
    :mozilla.474:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
    :mozilla.475:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
    :mozilla.476:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
    :mozilla.477:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
    :mozilla.478:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
    :mozilla.402:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@adviva[2].txt -> TrackingCookie.Adviva : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
    :mozilla.295:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
    :mozilla.873:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
    :mozilla.512:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
    :mozilla.513:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
    :mozilla.840:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
    :mozilla.841:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
    :mozilla.842:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
    :mozilla.843:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
    :mozilla.860:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
    :mozilla.861:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
    :mozilla.862:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
    :mozilla.863:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
    :mozilla.398:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@com[1].txt -> TrackingCookie.Com : Nettoyé.
    :mozilla.902:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
    :mozilla.903:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
    :mozilla.904:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.
    :mozilla.190:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
    :mozilla.191:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
    :mozilla.192:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
    :mozilla.193:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Cpvfeed : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Nettoyé.
    :mozilla.276:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
    :mozilla.460:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@estat[2].txt -> TrackingCookie.Estat : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Nettoyé.
    :mozilla.358:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
    :mozilla.359:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
    :mozilla.360:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
    :mozilla.361:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé.
    :mozilla.260:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
    :mozilla.263:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
    :mozilla.270:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
    :mozilla.274:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
    :mozilla.450:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
    :mozilla.570:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
    :mozilla.933:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
    :mozilla.457:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
    :mozilla.458:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
    :mozilla.459:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@ehg-franceloisirs.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@ehg-herbalife.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@ehg-neuftelecom.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@ehg-raja.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@ehg-telecomitalia.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
    :mozilla.34:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
    :mozilla.38:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
    :mozilla.507:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Masterstats : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@image.masterstats[1].txt -> TrackingCookie.Masterstats : Nettoyé.
    :mozilla.224:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@www.myaffiliateprogram[1].txt -> TrackingCookie.Myaffiliateprogram : Nettoyé.
    :mozilla.490:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
    :mozilla.491:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
    :mozilla.492:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
    :mozilla.495:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@data2.perf.overture[1].txt -> TrackingCookie.Overture : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@overture[2].txt -> TrackingCookie.Overture : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@perf.overture[1].txt -> TrackingCookie.Overture : Nettoyé.
    :mozilla.987:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Paycounter : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@paycounter[1].txt -> TrackingCookie.Paycounter : Nettoyé.
    :mozilla.550:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Paypal : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@real[1].txt -> TrackingCookie.Real : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@realarcadebundles.real[1].txt -> TrackingCookie.Real : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@web4.realtracker[1].txt -> TrackingCookie.Realtracker : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@revsci[2].txt -> TrackingCookie.Revsci : Nettoyé.
    :mozilla.579:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.580:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.581:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.583:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.585:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.586:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.43:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.44:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.45:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.46:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.47:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.48:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.49:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.50:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.52:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.53:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.54:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.55:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.56:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.57:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.59:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.60:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.62:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.63:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.64:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.65:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.66:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.67:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.68:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.69:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.72:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.73:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.74:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.75:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.76:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.77:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.78:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.79:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.80:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.81:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.82:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.83:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.84:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.85:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.86:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.87:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.88:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.89:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.91:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.92:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.93:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.94:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.95:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.96:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.97:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.98:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Nettoyé.
    :mozilla.320:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.321:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.322:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.323:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.324:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.325:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.326:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.327:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.328:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.329:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.330:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.331:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.332:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.333:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.334:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.335:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.336:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.337:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@sexlist[2].txt -> TrackingCookie.Sexlist : Nettoyé.
    :mozilla.111:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sextracker : Nettoyé.
    :mozilla.112:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sextracker : Nettoyé.
    :mozilla.113:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sextracker : Nettoyé.
    :mozilla.114:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sextracker : Nettoyé.
    :mozilla.119:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sextracker : Nettoyé.
    :mozilla.131:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sextracker : Nettoyé.
    :mozilla.338:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Sextracker : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@counter1.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@counter12.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@counter13.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@counter14.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@counter9.sextracker[2].txt -> TrackingCookie.Sextracker : Nettoyé.
    :mozilla.12:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.13:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.14:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.15:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.16:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.17:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@specificclick[2].txt -> TrackingCookie.Specificclick : Nettoyé.
    :mozilla.298:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
    :mozilla.299:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
    :mozilla.300:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
    :mozilla.301:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
    :mozilla.302:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
    :mozilla.303:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
    :mozilla.304:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
    :mozilla.305:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@statcounter[1].txt -> TrackingCookie.Statcounter : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@tacoda[2].txt -> TrackingCookie.Tacoda : Nettoyé.
    :mozilla.204:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
    :mozilla.207:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
    :mozilla.208:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
    :mozilla.209:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
    :mozilla.214:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
    :mozilla.164:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
    :mozilla.166:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
    :mozilla.167:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
    :mozilla.743:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@xxxcounter[2].txt -> TrackingCookie.Xxxcounter : Nettoyé.
    :mozilla.205:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
    :mozilla.206:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
    :mozilla.210:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
    :mozilla.211:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
    :mozilla.212:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
    :mozilla.213:C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
    C:\Documents and Settings\jerome\Cookies\jerome@zedo[2].txt -> TrackingCookie.Zedo : Nettoyé.
    C:\WINDOWS\Downloaded Program Files\start.INF -> Trojan.Dagonit.inf : Nettoyé.
    C:\Program Files\Media-Codec -> Trojan.Small : Nettoyé.
    C:\Program Files\Media-Codec\uninst.exe -> Trojan.Small : Nettoyé.
    C:\WINDOWS\system32\1024 -> Trojan.Small : Nettoyé.
    C:\WINDOWS\system32\1024\ld21DD.tmp -> Trojan.Small : Nettoyé.
    C:\WINDOWS\system32\1024\ld2B6F.tmp -> Trojan.Small : Nettoyé.
    C:\WINDOWS\system32\1024\ld3ED3.tmp -> Trojan.Small : Nettoyé.
    C:\WINDOWS\system32\1024\ld7B5B.tmp -> Trojan.Small : Nettoyé.

    Fin du rapport

    maintenant je vais faire les 2 autres étapes.

    a+
    0
  10. web66 Messages postés 147 Date d'inscription   Statut Membre 1
     
    bonjour papro info,

    ok pour le 1er, j'attends les 2 autres, merci
    0
  11. papro info Messages postés 70 Statut Membre
     
    bon ça y est la rentrèe de ma fille est faite je peux me remettre o boulot!

    j'ai eu un petit prob avec spybot. j'ai fait corrigé les erreurs et ça a palnté mon ordi. Apres j'avais + internet je commencé a avoir quelque sueur.J'ai réinstallé et ça marche .

    dois-je relancer spybot? en tout lors de cette opération juste o moment du plantage ça ma enlevé le triangle jaune avec le point !.

    par j'ai toujours un ecusson dans la barre d'état clignotant rouge avec croix blanche et bleu avec ? . j'avais oublier de le préciser au début avec le triangle . OUPS!

    je lance pour l'instant A-SQUARED.

    j'attend de tes nouvelles avant de faire des bétises.lol
    0
  12. web66 Messages postés 147 Date d'inscription   Statut Membre 1
     
    re papro info,

    oui stp, relance spybot, et poste les 2 rapports

    a+
    0
  13. papro info Messages postés 70 Statut Membre
     
    j'ai aussi des fenetres d'erreurs de windows qui s'affiche, au demarage la plupart du temps, depuis.

    ce message m'indique que "la mémoire ne peut pas etre "read"". juste avant il donne des chifres qui doivent désigner des emplacements je pense : "0x031777a".

    Et c'est ce qui m'a galeré pour réinstallé internet jai eu ce mess je ne c combien de fois et a chaque j'ai appuyer sur OK.
    0
  14. web66 Messages postés 147 Date d'inscription   Statut Membre 1
     
    bon ok,

    tu as des codes erreurs ?

    poste un hijak avec les 2 autres stp
    0
  15. papro info Messages postés 70 Statut Membre
     
    me revoila, j'ai le rapport de A-squared et hijack.avec spybot monordi c encore planté lors de la correction. (?)

    rapport de A-squared:

    Version - a-squared Free 3.0
    Dernière mise à jour: 04/09/2007 09:26:38

    Réglages Scan:

    Objets: Mémoire, Traces, Cookies, C:\WINDOWS\, C:\Program Files
    Scan archives: Marche
    Heuristiques: Marche
    Scan ADS: Marche

    Début du scan: 04/09/2007 09:30:12

    [1556] C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE Détecter: Adware.BackWeb.a
    [464] C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe Détecter: Adware.BackWeb.a
    [2484] C:\Program Files\MSN Messenger\RICHED20.dll Détecter: Adware.Win32.MyWebSearch
    c:\program files\myway\srchastt Détecter: Trace.Directory.MyWay
    c:\program files\myway\srchastt\1.bin Détecter: Trace.Directory.MyWay
    c:\program files\myway\srchastt\cache Détecter: Trace.Directory.MyWay
    c:\program files\myway Détecter: Trace.Directory.MyWaySpeedbar
    c:\program files\mywebsearch\bar Détecter: Trace.Directory.MyWebSearch Toolbar
    c:\program files\mywebsearch\bar\1.bin Détecter: Trace.Directory.MyWebSearch Toolbar
    c:\program files\mywebsearch Détecter: Trace.Directory.MyWebSearchToobar
    c:\program files\mywebsearch Détecter: Trace.Directory.MyWebSearchToolbar
    c:\windows\downloaded program files\default.inf Détecter: Trace.File.iePlugin
    c:\program files\myway\srchastt\1.bin\partner.dat Détecter: Trace.File.MyWay
    c:\program files\myway\srchastt\1.bin\partner2.dat Détecter: Trace.File.MyWay
    c:\program files\myway\srchastt\cache\files.ini Détecter: Trace.File.MyWay
    c:\program files\mywebsearch\bar\1.bin\f3reprox.dll Détecter: Trace.File.MyWebSearch Toolbar
    c:\windows\system32\ifhelper.dll Détecter: Trace.File.SearchCentrix
    Key: HKEY_CLASSES_ROOT\clsid\{9afb8248-617f-460d-9366-d71cdeda3179} Détecter: Trace.Registry.FunWebProducts
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\software\microsoft\internet explorer\toolbar\shellbrowser --> {74cc49f7-eb32-4a08-b204-948962a6e3db} Détecter: Trace.Registry.HotBar
    Value: HKEY_CLASSES_ROOT\AppID\DownloadManager.EXE --> AppID Détecter: Trace.Registry.MediaPipe
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\DownloadManager.EXE --> AppID Détecter: Trace.Registry.MediaPipe
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\My Way Speedbar Uninstall --> Changed Détecter: Trace.Registry.MyWay
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\My Way Speedbar Uninstall --> SlowInfoCache Détecter: Trace.Registry.MyWay
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWaySearchAssistant --> Changed Détecter: Trace.Registry.MyWay
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWaySearchAssistant --> SlowInfoCache Détecter: Trace.Registry.MyWay
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} --> DisplayName Détecter: Trace.Registry.MyWebSearch Toolbar
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} --> URL Détecter: Trace.Registry.MyWebSearch Toolbar
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\MyWebSearch\bar --> MenuExtLabel Détecter: Trace.Registry.MyWebSearch Toolbar
    Key: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\software\mywebsearch Détecter: Trace.Registry.MyWebSearchToobar
    Key: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\software\mywebsearch Détecter: Trace.Registry.MyWebSearchToolbar
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\software\microsoft\windows\currentversion\run --> instant access Détecter: Trace.Registry.P2E
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\software\microsoft\windows\currentversion\run --> instant access Détecter: Trace.Registry.Suspicious
    Value: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run --> controlpanel Détecter: Trace.Registry.Suspicious
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Internet Security --> Path Détecter: Trace.Registry.EliteCodec
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Internet Security --> Removable Détecter: Trace.Registry.EliteCodec
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Internet Security --> Type Détecter: Trace.Registry.EliteCodec
    c:\program files\boonty Détecter: Trace.Directory.BoontyBox
    c:\documents and settings\jerome\application data\shareaza Détecter: Trace.Directory.Shareaza Lite
    c:\documents and settings\jerome\application data\shareaza\collections Détecter: Trace.Directory.Shareaza Lite
    c:\documents and settings\jerome\application data\shareaza\data Détecter: Trace.Directory.Shareaza Lite
    c:\documents and settings\jerome\application data\shareaza\data\library1.dat Détecter: Trace.File.Shareaza Lite
    c:\documents and settings\jerome\application data\shareaza\data\tigertree.dat Détecter: Trace.File.Shareaza Lite
    c:\documents and settings\jerome\application data\shareaza\data\uploadqueues.dat Détecter: Trace.File.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{2EE9D739-7726-41cf-8F18-4B1B8763BC63}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{394011F0-6D5C-42a3-96C6-24B9AD6B010C}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{3DC28AA6-A597-4E03-96DF-ADA19155B0BE}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{4956C5F5-D9A8-4CBB-8994-F53CF55CFDF5}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{591A5CFF-3172-4020-A067-238542DDE9C2}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{5E6309F2-9971-4683-9445-F548E81BEC07}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{9AA8DF47-B8FE-47da-AB1A-2DAA0DA0B646}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{A4F1E383-B493-4580-8DB6-5CC89CBAAC53}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{BF00DBCC-90A2-4f46-8171-7D4F929D035F}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{C3B7B25C-6B8B-481A-BC48-59F9A6F7B69A}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{D07E630D-A850-4f11-AD29-3D3848B67EFE}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_CLASSES_ROOT\CLSID\{D427C22F-23FB-4E51-A8B8-70F2036ED3BA}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Downloads --> CollectionPath Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Downloads --> CompletePath Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Downloads --> IncompletePath Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Downloads --> TorrentPath Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Plugins --> {2EE9D739-7726-41cf-8F18-4B1B8763BC63} Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Plugins --> {9AA8DF47-B8FE-47da-AB1A-2DAA0DA0B646} Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Settings --> FirstRun Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Settings --> GUIMode Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Settings --> Language Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Settings --> RatesInBytes Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Settings --> Running Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Settings --> VerboseMode Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Skins --> ShareazaOS\ShareazaOS.xml Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\VersionCheck --> NextCheck Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Windows --> CMainWnd.ShowCmd Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza\Windows --> CRemoteWnd.ShowCmd Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza --> Path Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_USERS\S-1-5-21-776561741-651377827-839522115-1004\Software\Shareaza\Shareaza --> UserPath Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EE9D739-7726-41cf-8F18-4B1B8763BC63}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{394011F0-6D5C-42a3-96C6-24B9AD6B010C}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3DC28AA6-A597-4E03-96DF-ADA19155B0BE}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4956C5F5-D9A8-4CBB-8994-F53CF55CFDF5}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{591A5CFF-3172-4020-A067-238542DDE9C2}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E6309F2-9971-4683-9445-F548E81BEC07}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9AA8DF47-B8FE-47da-AB1A-2DAA0DA0B646}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A4F1E383-B493-4580-8DB6-5CC89CBAAC53}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BF00DBCC-90A2-4f46-8171-7D4F929D035F}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C3B7B25C-6B8B-481A-BC48-59F9A6F7B69A}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D07E630D-A850-4f11-AD29-3D3848B67EFE}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D427C22F-23FB-4E51-A8B8-70F2036ED3BA}\InprocServer32 --> ThreadingModel Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\AudioVis --> Mike`s Simple Scopes Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\AudioVis --> Sonique Wrapper Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\AudioVis --> WMP Wrapper Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\DownloadPreview --> .avi Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\DownloadPreview --> .div Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\DownloadPreview --> .mp3 Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\DownloadPreview --> .mpeg Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\DownloadPreview --> .mpg Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\General --> Shareaza Image Viewer Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\ImageService --> .avi Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\ImageService --> .jpeg Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\ImageService --> .jpg Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\ImageService --> .mpeg Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\ImageService --> .mpg Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\ImageService --> .png Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\LibraryBuilder --> .sks Détecter: Trace.Registry.Shareaza Lite
    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Shareaza\Shareaza\Plugins\MediaPlayer --> Default Détecter: Trace.Registry.Shareaza Lite
    C:\Documents and Settings\jerome\Cookies\jerome@about[1].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@adserver.aol[2].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@bizrate[1].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@cgi-bin[1].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@commander.1and1[2].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@comparatifadsl[1].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@indextools[2].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@media.showroomprive[2].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@mediastay[2].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@metriweb[1].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@sexyavenue[1].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@www.buycentral[1].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Cookies\jerome@www.cibleclick[1].txt Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:16 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:78 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:79 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:80 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:81 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:82 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:83 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:84 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:109 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:111 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:113 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:129 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:130 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:131 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:138 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:139 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:144 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:164 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:165 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:221 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:275 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:278 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:345 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:346 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:347 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:348 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:349 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:350 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:351 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:382 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:384 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:408 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:409 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:410 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:411 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:421 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:504 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:505 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:557 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:558 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:559 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:560 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:561 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:594 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:595 Détecter: Trace.TrackingCookie
    C:\Documents and Settings\jerome\Application Data\Mozilla\Firefox\Profiles\7pvbj2h8.default\cookies.txt:715 Détecter: Trace.TrackingCookie
    C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll Détecter: Riskware.AdTool.Win32.MyWebSearch.i
    C:\Program Files\MSN Messenger\msimg32.dll Détecter: Riskware.AdTool.Win32.MyWebSearch.au
    C:\Program Files\MSN Messenger\riched20.dll Détecter: Adware.Win32.MyWebSearch
    C:\Program Files\MSN Messenger.zip/msimg32.dll Détecter: Riskware.AdTool.Win32.MyWebSearch.au
    C:\Program Files\MSN Messenger.zip/riched20.dll Détecter: Adware.Win32.MyWebSearch
    C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL Détecter: Adware.ToolBar.MyWay.c
    C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL Détecter: Riskware.AdTool.Win32.MyWebSearch.au
    C:\Program Files\Securitoo\av_fw\backweb\1044199\6.1.4.58-1044199L\Program\runner.exe Détecter: Adware.BackWeb.a
    C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\backWeb-1044199.exe Détecter: Adware.BackWeb.a
    C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\ServiceWrapper-1044199.exe Détecter: Adware.BackWeb.a

    Scanné

    Fichiers: 15763
    Traces: 315838
    Cookies: 3154
    Processus: 60

    Trouver

    Fichiers: 10
    Traces: 99
    Cookies: 59
    Processus: 3
    Clés de Registre: 0

    Fin du Scan: 04/09/2007 09:59:42
    Temps du Scan: 00:29:30

    et hijack:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 10:52:07, on 04/09/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\a-squared Free\a2service.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
    C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
    C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
    C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
    C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
    C:\WINDOWS\System32\FTRTSVC.exe
    C:\WINDOWS\System32\gearsec.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
    C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
    C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
    C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
    C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
    C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Apoint2K\Apoint.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
    C:\Program Files\Apoint2K\Apntex.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE
    C:\WINDOWS\VM_STI.EXE
    C:\WINDOWS\AutoFlip.exe
    C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
    C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
    C:\PROGRA~1\Wanadoo\ComComp.exe
    C:\PROGRA~1\Wanadoo\Toaster.exe
    C:\PROGRA~1\Wanadoo\Inactivity.exe
    C:\PROGRA~1\Wanadoo\PollingModule.exe
    C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
    C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
    C:\PROGRA~1\Wanadoo\Watch.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
    C:\Documents and Settings\jerome\Local Settings\Temp\Répertoire temporaire 2 pour HiJackThis.zip\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {1C3C4699-B285-475F-BE47-0B26088CE876} - C:\Program Files\Video ActiveX Access\iesplg.dll (file missing)
    O2 - BHO: (no name) - {47B83D78-F986-4E96-9769-2C55EF14DA0B} - C:\WINDOWS\System32\__c0011A89.dat
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
    O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\hpdtlk02.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
    O3 - Toolbar: Protection Bar - {F06E2ABE-3A50-4079-BE25-FC100D9EAA25} - C:\Program Files\Video ActiveX Access\iesbpl.dll (file missing)
    O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
    O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
    O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\av_fw\TNB\TNBUtil.exe" /CHECKALL
    O4 - HKLM\..\Run: [hgqhp.exe] C:\WINDOWS\System32\hgqhp.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [RunFlip] C:\WINDOWS\RunFlip.exe
    O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE NoteCam Direct 300
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [TransVente] C:\PROGRA~1\TRANSV~1\TransVente.exe 1
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
    O4 - HKLM\..\Policies\Explorer\Run: [user32.dll] C:\Program Files\Video ActiveX Access\iesmn.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: &Search - ?p=ZNxmk142YYFR
    O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
    O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/superdistribution/installer2.cab
    O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file://C:\Program Files\Magician's Handbook - Cursed Valley\Images\stg_drm.ocx
    O16 - DPF: {321F38B6-7E5F-470E-B58C-927523B7AF92} - http://es6-scripts.dlv4.com/binaries/egaccess4/egaccess4_1069_em_XP.cab
    O16 - DPF: {33331111-1111-1111-1111-611111193423} -
    O16 - DPF: {33331111-1111-1111-1111-611111193429} -
    O16 - DPF: {33331111-1111-1111-1111-615111193427} -
    O16 - DPF: {33331111-1131-1111-1111-611111193428} -
    O16 - DPF: {4F5E4276-C120-11D6-A1FD-00508B9D48EA} (dldisplay Class) - http://www.gamehouse.com/ghdlctl.cab
    O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
    O16 - DPF: {71DA2A4E-ACB3-4065-9E41-8BC42EABE427} - http://scripts.dlv4.com/binaries/IA/svcia32_FR_XP.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {AA59202C-5E41-48FC-AF7D-324F5FD6A9F1} - http://es6-scripts.dlv4.com/binaries/egaccess4/egaccess4_1070_em_XP.cab
    O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
    O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file://C:\Program Files\Travelogue 360 - Rome\Images\armhelper.ocx
    O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
    O16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/it/Woo2/fr/chat/nPaxChat.cab
    O20 - AppInit_DLLs: C:\WINDOWS\System32\__c00D97AE.dat
    O22 - SharedTaskScheduler: hyracina - {b36d60c8-e1ce-464e-b74c-8128a627ef56} - C:\WINDOWS\System32\vvihh.dll
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - C:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
    O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
    O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
    O23 - Service: Service de sécurité matérielle (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
    O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    0
  16. web66 Messages postés 147 Date d'inscription   Statut Membre 1
     
    re,

    Fait ce nettoyage: (à faire réguliérement)

    1-Telecharges et installes ceci:
    CCleaner:
    Ccleaner
    ccleaner

    dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
    Les sauvegardes que tu aura faites tu pourra les supprimer si ton ordinateur n'a plus de problémes

    ¤Relance Ccleaner, vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

    2-Télécharges Blacklight et sauvegarde le sur ton bureau.
    https://www.f-secure.com/en

    Double cliques sur " blbeta.exe " et acceptes la licence; clic sur "Scan" puis "Next"

    Un rapport, va se créer sur ton bureau "fslb-....."

    Copies et colles le contenu de ce rapport ici.

    Ne touche à rien d'autre!
    a+
    0
  17. papro info Messages postés 70 Statut Membre
     
    re,

    voila le rapport de Fsecure:

    09/04/07 15:41:59 [Info]: BlackLight Engine 1.0.64 initialized
    09/04/07 15:41:59 [Info]: OS: 5.1 build 2600 (Service Pack 1)
    09/04/07 15:42:00 [Note]: 7019 4
    09/04/07 15:42:00 [Note]: 7005 0
    09/04/07 15:42:54 [Note]: 7007 0

    a+
    0
  18. web66 Messages postés 147 Date d'inscription   Statut Membre 1
     
    ok, je suis re là,

    comment se comporte ton pc, si mal remets un hijack st

    a+
    0
  19. papro info Messages postés 70 Statut Membre
     
    re,

    j'ai toujours l'ecusson et j'ai eu 1 mess de mon antivirus securitoo: "code dangereux infecté.... infection: trojan-proxy.win32.horst.ca

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:59:58, on 04/09/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\a-squared Free\a2service.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
    C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
    C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
    C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
    C:\WINDOWS\System32\FTRTSVC.exe
    C:\WINDOWS\System32\gearsec.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
    C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
    C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
    C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
    C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Apoint2K\Apoint.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
    C:\Program Files\Apoint2K\Apntex.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE
    C:\WINDOWS\VM_STI.EXE
    C:\WINDOWS\AutoFlip.exe
    C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
    C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
    C:\PROGRA~1\Wanadoo\ComComp.exe
    C:\PROGRA~1\Wanadoo\Toaster.exe
    C:\PROGRA~1\Wanadoo\Inactivity.exe
    C:\PROGRA~1\Wanadoo\PollingModule.exe
    C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
    C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
    C:\PROGRA~1\Wanadoo\Watch.exe
    C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
    C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\jerome\Mes documents\jerome-jeanne\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {1C3C4699-B285-475F-BE47-0B26088CE876} - (no file)
    O2 - BHO: (no name) - {47B83D78-F986-4E96-9769-2C55EF14DA0B} - C:\WINDOWS\System32\__c0011A89.dat
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
    O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\hpdtlk02.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
    O3 - Toolbar: (no name) - {F06E2ABE-3A50-4079-BE25-FC100D9EAA25} - (no file)
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
    O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
    O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\av_fw\TNB\TNBUtil.exe" /CHECKALL
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [RunFlip] C:\WINDOWS\RunFlip.exe
    O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE NoteCam Direct 300
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
    O4 - HKLM\..\Policies\Explorer\Run: [user32.dll] C:\Program Files\Video ActiveX Access\iesmn.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: &Search - ?p=ZNxmk142YYFR
    O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
    O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} - http://mm.tf1.fr/superdistribution/installer2.cab
    O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file://C:\Program Files\Magician's Handbook - Cursed Valley\Images\stg_drm.ocx
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {321F38B6-7E5F-470E-B58C-927523B7AF92} - http://es6-scripts.dlv4.com/binaries/egaccess4/egaccess4_1069_em_XP.cab
    O16 - DPF: {33331111-1111-1111-1111-611111193423} -
    O16 - DPF: {33331111-1111-1111-1111-611111193429} -
    O16 - DPF: {33331111-1111-1111-1111-615111193427} -
    O16 - DPF: {33331111-1131-1111-1111-611111193428} -
    O16 - DPF: {4F5E4276-C120-11D6-A1FD-00508B9D48EA} (dldisplay Class) - http://www.gamehouse.com/ghdlctl.cab
    O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
    O16 - DPF: {71DA2A4E-ACB3-4065-9E41-8BC42EABE427} - http://scripts.dlv4.com/binaries/IA/svcia32_FR_XP.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {AA59202C-5E41-48FC-AF7D-324F5FD6A9F1} - http://es6-scripts.dlv4.com/binaries/egaccess4/egaccess4_1070_em_XP.cab
    O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
    O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file://C:\Program Files\Travelogue 360 - Rome\Images\armhelper.ocx
    O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
    O16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/it/Woo2/fr/chat/nPaxChat.cab
    O20 - AppInit_DLLs: C:\WINDOWS\System32\__c00D97AE.dat
    O22 - SharedTaskScheduler: hyracina - {b36d60c8-e1ce-464e-b74c-8128a627ef56} - C:\WINDOWS\System32\vvihh.dll
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - C:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
    O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
    O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
    O23 - Service: Service de sécurité matérielle (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
    O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    0
  20. papro info Messages postés 70 Statut Membre
     
    désolé mais je suis pas beaucoup la aujourd'hui, heureusement que je suis en vacances lol.

    et je repars vers 19h10/15 et je rentre ce soir vers 22h15.

    a+
    0
  21. web66 Messages postés 147 Date d'inscription   Statut Membre 1
     
    dac papro info

    a demain, bonne soirée
    0
  • 1
  • 2
  • 3
  • 4