PC infecte par trojan

Question

Bonjours a tous;

Bon voila; j'ai moi aussi des soucis avec ce maudit trojan.J'ai installe HJ et je vous post mon rapport.En sachant que j'ai AVAST comme anti virus,et je viens aussi d'effectuer le scan avec avast me confirmant mes craintes.

Une ame charitable serait la bienvenue merci par avance.

Voici le rapport:

Logfile of HijackThis v1.99.1
Scan saved at 15:25:26, on 26/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Saitek\Software\ProfilerU.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\Program Files\RXToolBar\sfcont.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SemanticInsight] C:\Program Files\RXToolBar\Semantic Insight\SemanticInsight.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\ProfilerU.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [helpr] C:\Program Files\SETI\helper.exe -loader -nolog
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\WANADOO\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /M "Stylus DX3800" /EF "HKCU"
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [FlyAway] C:\DOCUME~1\ophelie\LOCALS~1\Temp\QZTEMP\FlyAway.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://www.m6video.fr/1click/install/files/installer2.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://ophetsteph.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - 
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.netprint.com/view/uploader/ImageUploader3.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://arcade.icq.com/carlo/zuma/popcaploader_v5.cab
O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/
O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A} (MCSendMessageHandler Class) - http://xtraz.icq.com/xtraz/activex/MISBH.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

A+ mad

clownface · Answer

Bonsoir,

Commence par ceci  : virus methode preliminaire de desinfection version fr
et postes les rapports

madmax069 · Answer

Bonsoir Clownface,

Tout d'abord merci de m'avoir répondu.

Pour le premier lien j'ai téléchargé ccleaner, ensuite j'ai suiivi la procédure mais des que j'i lancé l'analyse il à planté au beau milieu e celle-ci accompagné d'un rapport d'erreur de windows.

Pour ton deuxième message le lien ne fonctionne pas.

Je suis un peu perdu là, je ne sais plu trop quoi faire.

Merci de m'aider.

Mad

clownface · Answer

http://www.malekal.com/download/clean.zip

madmax069 · Answer

OK ça à fonctionné voici le rapport:

 26/09/2007 a 21:12:55,14 
 
*** Recherche des fichiers dans C: 
C:\StubInstaller.exe FOUND 
 
*** Recherche des fichiers dans C:\WINDOWS\ 
C:\WINDOWS\smdat32m.sys FOUND 
 
*** Recherche des fichiers dans C:\WINDOWS\system32 
"C:\WINDOWS\Downloaded Program Files\installer2.dll" FOUND 
"C:\WINDOWS\Downloaded Program Files\popcaploader.dll" FOUND 
C:\WINDOWS\Temp\setup.exe FOUND 
 
*** Recherche des fichiers dans C:\Program Files 
"C:\Program Files\Altnet\" FOUND 
"C:\Program Files\DivX\Google\Firefox\ffinstaller.exe" FOUND 
"C:\Program Files\INSTAFINK\" FOUND 
"C:\Program Files\Need2Find\" FOUND 
*** Fin du rapport !

clownface · Answer

ok redémarre en mode sans échec
Ouvrez le dossier clean qui se trouve sur ton bureau, et double-clique sur clean.cmd, une fenêtre noire va apparaître , 
choisis l'option 2 et laisse l'operation de nettoyage s'effectuer.

madmax069 · Answer

OK par contre peut tu me donner la procedure pour le redemarage sans echec (desole novice)

clownface · Answer

voilà : https://www.malekal.com/demarrer-windows-mode-sans-echec/

madmax069 · Answer

OK,merci je fait tout ca

madmax069 · Answer

OK je viens de faire la procedure mais visiblement rien a change.

J'ai tente d relancer ccleaner mais il plante encore.

ca m'enerve!

clownface · Answer

ok, passes à la seconde etape : virus methode preliminaire de desinfection version fr
on verra plus tard pour c cleaner
postes moi un rapport avg anti spyware

madmax069 · Answer

Ok,avec AVG meme probleme que pour ccleaner,il plante au beau milieu de l'analyse.

madmax069 · Answer

Bonjour, 

Bon j'ai réessayé ce matin de lancer l'analyse d'AVG mais au bout de 20 min d'analyse ça plante de nouveau avec un rapport d'erreur.

avgas.exe a rencontré un problème et doit fermer. Nous vous prions de nous excuser pour le désagrément encouru.

Détail du rapport:
AppName: avgas.exe	 AppVer: 7.5.1.43	 ModName: unknown
ModVer: 0.0.0.0	 Offset: 010e48c3

Je suis vrament perdu là car je ne peu finalement pas poster de rapport AVG que faire s'il vous plait.

Merci par avance à la personne qui voudra bien m'aider à sortir de cet panade!!!

Mad

madmax069 · Answer

Bonjour, 

Je viens de réessayer l'analyse AVG mais cette fois ci en analyse rapide et non analyse complete car ça beug, j'ai don reussi à avoir un rapport d'erreur en analyse rapide le voici:

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	11:15:53 27/09/2007

 + Résultat de l'analyse:	



HKLM\SOFTWARE\Altnet -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\ADM -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\ADM\ADMCache -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard\Messages -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard\Settings -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard\Setup -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard\Temp Internet Shares -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\DownloadManager -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\LocalFiles -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\TopSearch -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM.ADM -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM.ADM.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM.ADM\CLSID -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM.ADM\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule\CLSID -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AltnetDM -> Adware.Altnet : Ignoré.
C:\WINDOWS\Downloaded Program Files\installer2.dll -> Adware.ClickMedia : Ignoré.
HKLM\SOFTWARE\Classes\CLSID\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKU\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
C:\WINDOWS\Downloaded Program Files\popcaploader.dll -> Not-A-Virus.Downloader.Win32.PopCap.a : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@247realmedia[1].txt -> TrackingCookie.247realmedia : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@3suisses.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@canalplus.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@heavycom.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@karavel.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@numericable.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@4.adbrite[1].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@adbrite[2].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ad.adition[1].txt -> TrackingCookie.Adition : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@adrevolver[1].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@media.adrevolver[3].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@advertising[2].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@adviva[2].txt -> TrackingCookie.Adviva : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@casalemedia[2].txt -> TrackingCookie.Casalemedia : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@cz3.clickzs[1].txt -> TrackingCookie.Clickzs : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@com[1].txt -> TrackingCookie.Com : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@e-2dj6whk4qjdjoep.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@fastclick[1].txt -> TrackingCookie.Fastclick : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@findwhat[1].txt -> TrackingCookie.Findwhat : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ehg-ati.hitbox[2].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@hotlog[2].txt -> TrackingCookie.Hotlog : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@search.live[1].txt -> TrackingCookie.Live : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@image.masterstats[1].txt -> TrackingCookie.Masterstats : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
:mozilla.10:C:\Documents and Settings\ophelie\Application Data\Mozilla\Firefox\Profiles\h69mwndu.default\cookies.txt -> TrackingCookie.Netflame : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@overture[2].txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@www.paypal[1].txt -> TrackingCookie.Paypal : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ads.planetactive[2].txt -> TrackingCookie.Planetactive : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ads-205.quarterserver[1].txt -> TrackingCookie.Quarterserver : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@revsci[1].txt -> TrackingCookie.Revsci : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@sexlist[1].txt -> TrackingCookie.Sexlist : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@counter2.sextracker[1].txt -> TrackingCookie.Sextracker : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@counter7.sextracker[1].txt -> TrackingCookie.Sextracker : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@statcounter[1].txt -> TrackingCookie.Statcounter : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@tacoda[2].txt -> TrackingCookie.Tacoda : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@bnpparibas.weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@m.webtrends[2].txt -> TrackingCookie.Webtrends : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@yadro[1].txt -> TrackingCookie.Yadro : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@d3.zedo[1].txt -> TrackingCookie.Zedo : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@zedo[2].txt -> TrackingCookie.Zedo : Ignoré.


Fin du rapport

clownface · Answer

Bonjour,

Télécharges a-squared : http://download5.emsisoft.com/a2FreeSetup.exe
fais un scan et supprime tout ce qu'il trouve.
idem avec spybot
n'oublies pas de les mettre a jour avant de lancer les scan.
refais un avg après pour voir s'il y a du changement.

madmax069 · Answer

Bonjour, 

Ok merci je tente ça!!!

madmax069 · Answer

Bonjour, 

Voilà le premier rapport a-squared, j'ai tout suprimé maintenant je vais faire spybot.

Version - a-squared Free 3.0
Dernière mise à jour: 27/09/2007 13:15:22

Réglages Scan:

Objets: Mémoire, Traces, Cookies, C:\WINDOWS\, C:\Program Files
Scan archives: Marche
Heuristiques: Marche
Scan ADS: Marche

Début du scan:	27/09/2007 13:15:43

c:\program files\altnet\download manager 	Détecter: Trace.Directory.Cydoor.TOPicks.a
c:\program files\altnet\points manager 	Détecter: Trace.Directory.Cydoor.TOPicks.a
c:\program files\instafink 	Détecter: Trace.Directory.InstaFinder
c:\documents and settings\ophelie\local settings\temp\admcache 	Détecter: Trace.Directory.KaZaA
c:\program files\kazaa 	Détecter: Trace.Directory.KaZaA
c:\program files\kazaa\my shared folder 	Détecter: Trace.Directory.KaZaA
c:\program files\need2find 	Détecter: Trace.Directory.P2PNetworking
c:\program files\altnet 	Détecter: Trace.Directory.TopSearch
c:\program files\altnet\points manager\localpages 	Détecter: Trace.Directory.TopSearch
c:\program files\altnet\points manager\skin 	Détecter: Trace.Directory.TopSearch
c:\program files\ares\tcpip_patcher.sys 	Détecter: Trace.File.Ares
c:\program files\ares\tcpippatcherdll.dll 	Détecter: Trace.File.Ares
c:\documents and settings\ophelie\local settings\temp\873101.tmp 	Détecter: Trace.File.Cydoor.TOPicks.a
c:\program files\altnet\download manager\admdata.dll 	Détecter: Trace.File.Cydoor.TOPicks.a
c:\windows\smdat32a.sys 	Détecter: Trace.File.Twain-Tech
c:\windows\smdat32m.sys 	Détecter: Trace.File.Twain-Tech
Value: HKEY_CLASSES_ROOT\arlnk --> URL Protocol 	Détecter: Trace.Registry.Ares
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\software\microsoft\windows\currentversion\run --> ares 	Détecter: Trace.Registry.Ares
Key: HKEY_CLASSES_ROOT\clsid\{1d3bce37-7834-4579-8169-e67681420a98} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\clsid\{9bbcf06c-dcd7-495d-80df-cdd5399d0ff8} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\clsid\{c15b7ea2-a360-43e8-a591-5faedc7c4e1d} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\clsid\{def37997-d9c9-4a4b-bf3c-88f99eaceec2} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\clsid\{e813099d-5529-47f4-9b37-4afafcb00a43} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{258a3625-183b-4477-aee2-ea54df6d878d} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{29e825aa-13bc-457c-806a-d72e4a25b3c5} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{9d4548ce-92fd-4c6c-ae7f-3dbe3bc763d8} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{ad5bc1f0-72d8-44b3-8e3d-8e8fecce43fb} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{e79dadc6-18d0-4a2a-831f-d196d41f8438} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{e813099d-5529-47f4-9b37-4afafcb00a43} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{1d3bce37-7834-4579-8169-e67681420a98} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{9bbcf06c-dcd7-495d-80df-cdd5399d0ff8} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Value: HKEY_LOCAL_MACHINE\software\classes\clsid\{9bbcf06c-dcd7-495d-80df-cdd5399d0ff8} --> appid 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{c15b7ea2-a360-43e8-a591-5faedc7c4e1d} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Value: HKEY_LOCAL_MACHINE\software\classes\clsid\{c15b7ea2-a360-43e8-a591-5faedc7c4e1d} --> appid 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{def37997-d9c9-4a4b-bf3c-88f99eaceec2} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{e813099d-5529-47f4-9b37-4afafcb00a43} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{258a3625-183b-4477-aee2-ea54df6d878d} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{29e825aa-13bc-457c-806a-d72e4a25b3c5} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{9d4548ce-92fd-4c6c-ae7f-3dbe3bc763d8} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{ad5bc1f0-72d8-44b3-8e3d-8e8fecce43fb} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{e79dadc6-18d0-4a2a-831f-d196d41f8438} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{e813099d-5529-47f4-9b37-4afafcb00a43} 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Value: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run --> altnetpointsmanager 	Détecter: Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\typelib\{5830698f-7fc0-40cd-a453-9a0cafdf3a64} 	Détecter: Trace.Registry.Grokster
Key: HKEY_CLASSES_ROOT\typelib\{676f6d1d-c559-42a9-860b-27c1477b7179} 	Détecter: Trace.Registry.Grokster
Key: HKEY_CLASSES_ROOT\typelib\{bff4f684-677e-44f4-8c74-1d575c950e10} 	Détecter: Trace.Registry.Grokster
Key: HKEY_CLASSES_ROOT\clsid\{f78b32d6-d6d8-4137-a18f-91ebe1a4aedb} 	Détecter: Trace.Registry.KaZaA
Key: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\software\kazaa 	Détecter: Trace.Registry.KaZaA
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\software\kazaa --> tmp 	Détecter: Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\classes\appid\{8b0fef15-54dc-49f5-8377-8172de975f75} 	Détecter: Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\classes\appid\{99a8e2b2-3405-4c0d-9110-131c14caaf62} 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\in --> b0 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\in --> b0seconds 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\in --> b1 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\lastestimate --> b 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\lastestimate --> time 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\out --> b0 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\out --> b0seconds 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\out --> b1 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\cloudload --> sharedir 	Détecter: Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\kazaa\connectioninfo 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\connectioninfo --> kazaanet 	Détecter: Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\kazaa\localcontent 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\localcontent --> databasedir 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\localcontent --> downloaddir 	Détecter: Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\kazaa 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa --> listenport 	Détecter: Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa --> tmp 	Détecter: Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app management\arpcache\p2p networking 	Détecter: Trace.Registry.KaZaA
Key: HKEY_CLASSES_ROOT\clsid\{014da6c9-189f-421a-88cd-07cfe51cff10} 	Détecter: Trace.Registry.MyWay
Key: HKEY_CLASSES_ROOT\clsid\{4d1c4e81-a32a-416b-bcdb-33b3ef3617d3} 	Détecter: Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\clsid\{630d6140-04c5-4db0-b27a-020d766ff09b} 	Détecter: Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\need2findbar.settingsplugin.1 	Détecter: Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\need2findbar.settingsplugin 	Détecter: Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\need2findbar.toolbarplugin.1 	Détecter: Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\need2findbar.toolbarplugin 	Détecter: Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\clsid\{2ab289ae-4b90-4281-b2ae-1f4bb034b647} 	Détecter: Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\clsid\{59879fa4-4790-461c-a1cc-4ec4de4ca483} 	Détecter: Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\rxresult.rxresultfilter.1 	Détecter: Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\rxresult.rxresultfilter 	Détecter: Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\rxresult.rxresulttracker.1 	Détecter: Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\rxresult.rxresulttracker 	Détecter: Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\typelib\{05563f82-69a7-40a6-8670-153b635a7ef6} 	Détecter: Trace.Registry.RXToolbar
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{59879fa4-4790-461c-a1cc-4ec4de4ca483} 	Détecter: Trace.Registry.RXToolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run --> SemanticInsight 	Détecter: Trace.Registry.RXToolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\SemanticInsight --> AppDir 	Détecter: Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\clsid\{3646c2bd-3554-49ca-8125-44deefb881de} 	Détecter: Trace.Registry.SearchCentrix
Key: HKEY_CLASSES_ROOT\clsid\{3f4d4f88-0198-4921-b630-957f3eb814e0} 	Détecter: Trace.Registry.SearchCentrix
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{3646c2bd-3554-49ca-8125-44deefb881de} 	Détecter: Trace.Registry.SearchCentrix
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{3f4d4f88-0198-4921-b630-957f3eb814e0} 	Détecter: Trace.Registry.SearchCentrix
c:\program files\altnet 	Détecter: Trace.Directory.Altnet
c:\program files\altnet\download manager 	Détecter: Trace.Directory.Altnet
c:\program files\need2find 	Détecter: Trace.Directory.Need2Find Bar
c:\program files\need2find\bar 	Détecter: Trace.Directory.Need2Find Bar
c:\program files\need2find\bar\1.bin 	Détecter: Trace.Directory.Need2Find Bar
c:\program files\need2find\bar\cache 	Détecter: Trace.Directory.Need2Find Bar
c:\program files\need2find\bar\history 	Détecter: Trace.Directory.Need2Find Bar
c:\program files\need2find\bar\settings 	Détecter: Trace.Directory.Need2Find Bar
c:\program files\need2find\bar\1.bin\n2ffxtbr.jar 	Détecter: Trace.File.Need2Find Bar
c:\program files\need2find\bar\1.bin\n2ntstbr.jar 	Détecter: Trace.File.Need2Find Bar
c:\program files\need2find\bar\1.bin\partner.dat 	Détecter: Trace.File.Need2Find Bar
c:\program files\need2find\bar\cache\files.ini 	Détecter: Trace.File.Need2Find Bar
c:\program files\need2find\bar\history\search 	Détecter: Trace.File.Need2Find Bar
c:\program files\need2find\bar\settings\prevcfg.htm 	Détecter: Trace.File.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BBCF06C-DCD7-495D-80DF-CDD5399D0FF8} --> AppID 	Détecter: Trace.Registry.Altnet
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E813099D-5529-47F4-9B37-4AFAFCB00A43}\InProcServer32 --> ThreadingModel 	Détecter: Trace.Registry.Altnet
Value: HKEY_CLASSES_ROOT\CLSID\{B7156514-A76C-4545-9D5B-A4E1D02C7AEC}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Kazaa
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Kazaa\Advanced --> Status 	Détecter: Trace.Registry.Kazaa
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Kazaa\Settings --> Date 	Détecter: Trace.Registry.Kazaa
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Kazaa\Settings --> UseCount 	Détecter: Trace.Registry.Kazaa
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Kazaa\Transfer --> NoUploadLimitWhenIdle 	Détecter: Trace.Registry.Kazaa
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7156514-A76C-4545-9D5B-A4E1D02C7AEC}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Kazaa
Value: HKEY_CLASSES_ROOT\CLSID\{4D1C4E81-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_CLASSES_ROOT\CLSID\{4D1C4E89-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_CLASSES_ROOT\CLSID\{4D1C4E8B-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_CLASSES_ROOT\CLSID\{630D6140-04C5-4db0-B27A-020D766FF09B}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1C4E81-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1C4E89-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1C4E8B-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{630D6140-04C5-4db0-B27A-020D766FF09B}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall --> DisplayName 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall --> HelpLink 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall --> Publisher 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall --> UninstallString 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall --> UrlInfoAbout 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> PM-Home 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> PM-Points 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> PM-Redeem 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> PM-Settings 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> PM-Wallet 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> test 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> Build 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> CacheDir 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> CfgUrl 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> ConfigDateStamp 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> ConfigRevision 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> ConfigRevisionURL 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> CurInstall 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> Dir 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> Flags 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> HistoryDir 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> HTMLMenuRevision 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> Id 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> pid 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> pl 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> PluginPath 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> SettingsDir 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> ShzmCurInstall 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> sr 	Détecter: Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> Visible 	Détecter: Trace.Registry.Need2Find Bar
c:\program files\ares 	Détecter: Trace.Directory.Ares
c:\program files\macrogaming\sweetim 	Détecter: Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\conf 	Détecter: Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\conf\users 	Détecter: Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\data 	Détecter: Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\data\contentdb 	Détecter: Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\logs 	Détecter: Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\update 	Détecter: Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\conf\adapter.xml 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\conf\logger.xml 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\conf\messages.xml 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\conf\sweetim.xml 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\conf\sweetimapp.xml 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\conf\users\main_user_config.xml 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\data\contentdb\cache_indx.dat 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\default.xml 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgadaptersproxy.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgarchive.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgcommon.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgcommunication.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgconfig.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgflashplayer.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mghooking.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgieplayer.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mglogger.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgmsnauto.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgmsnmessengeradapter.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgsweetim.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgupdatesupport.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgxml_wrapper.dll 	Détecter: Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\sweetim.exe 	Détecter: Trace.File.Sweet IM
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Macrogaming\SweetIM --> InstallDir 	Détecter: Trace.Registry.Sweet IM
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run --> SweetIM 	Détecter: Trace.Registry.Sweet IM
Value: HKEY_CLASSES_ROOT\CLSID\{394011F0-6D5C-42a3-96C6-24B9AD6B010C}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{4956C5F5-D9A8-4CBB-8994-F53CF55CFDF5}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{591A5CFF-3172-4020-A067-238542DDE9C2}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{5E6309F2-9971-4683-9445-F548E81BEC07}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{9AA8DF47-B8FE-47da-AB1A-2DAA0DA0B646}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{A4F1E383-B493-4580-8DB6-5CC89CBAAC53}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{BF00DBCC-90A2-4f46-8171-7D4F929D035F}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{C3B7B25C-6B8B-481A-BC48-59F9A6F7B69A}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{D07E630D-A850-4f11-AD29-3D3848B67EFE}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{D427C22F-23FB-4E51-A8B8-70F2036ED3BA}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{394011F0-6D5C-42a3-96C6-24B9AD6B010C}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4956C5F5-D9A8-4CBB-8994-F53CF55CFDF5}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{591A5CFF-3172-4020-A067-238542DDE9C2}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E6309F2-9971-4683-9445-F548E81BEC07}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9AA8DF47-B8FE-47da-AB1A-2DAA0DA0B646}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A4F1E383-B493-4580-8DB6-5CC89CBAAC53}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BF00DBCC-90A2-4f46-8171-7D4F929D035F}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C3B7B25C-6B8B-481A-BC48-59F9A6F7B69A}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D07E630D-A850-4f11-AD29-3D3848B67EFE}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D427C22F-23FB-4E51-A8B8-70F2036ED3BA}\InprocServer32 --> ThreadingModel 	Détecter: Trace.Registry.Shareaza Lite
C:\Documents and Settings\ophelie\Cookies\ophelie@atdmt[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@advertising[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@adtech[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@windowsmedia[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@sexy-photos[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@xxxcounter[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@serving-sys[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@com[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@doubleclick[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@fastclick[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@sexy-flexy-girls[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@weborama[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@sexlist[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@server.iad.liveperson[3].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@tradedoubler[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@adserver.aol[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@tribalfusion[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@metriweb[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@bluestreak[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@community.codemasters[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@incredimail[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@www.buyonlinetraffic[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@mediaonenetwork[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@sexy-flexy-girls[3].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@adserver.adnpc[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@www.cibleclick[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@gamespy[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@comonline[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@findwhat[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@gamespyid[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@indextools[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@media.adrevolver[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@stat.dealtime[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@mediaplex[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@hotlog[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@server.iad.liveperson[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@bizrate[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@counter2.sextracker[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@counter7.sextracker[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@statcounter[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@2o7[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@zedo[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@247realmedia[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@adviva[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@bs.serving-sys[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@media.adrevolver[3].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@fl01.ct2.comclick[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@casalemedia[2].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@statse.webtrendslive[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@smartadserver[1].txt 	Détecter: Trace.TrackingCookie
C:\Documents and Settings\ophelie\Application Data\Mozilla\Firefox\Profiles\h69mwndu.default\cookies.txt:10 	Détecter: Trace.TrackingCookie
C:\WINDOWS\Downloaded Program Files\popcaploader.dll 	Détecter: Riskware.Downloader.Win32.PopCap.a
C:\Program Files\SETI\helpr.exe 	Détecter: Riskware.NetTool.Win32.Calc-SETI@Home.b
C:\Program Files\Shareaza\Downloads\(KALiSTO) aide memoire de l estheticienne [New Version] [Banned.Version].zip/Setup.exe 	Détecter: Trojan-Dropper.Win32.Agent.bsn

Scanné

Fichiers: 	141152
Traces: 	328321
Cookies: 	1006
Processus: 	42

Trouver

Fichiers: 	3
Traces: 	203
Cookies: 	51
Processus: 	0
Clés de Registre: 	0

Fin du Scan:	27/09/2007 14:10:27
Temps du Scan:	00:54:44

C:\Program Files\Shareaza\Downloads\(KALiSTO) aide memoire de l estheticienne [New Version] [Banned.Version].zip/Setup.exe	Supprimé Trojan-Dropper.Win32.Agent.bsn
C:\Program Files\SETI\helpr.exe	Supprimé Riskware.NetTool.Win32.Calc-SETI@Home.b
C:\WINDOWS\Downloaded Program Files\popcaploader.dll	Supprimé Riskware.Downloader.Win32.PopCap.a
C:\Documents and Settings\ophelie\Cookies\ophelie@atdmt[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@advertising[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@adtech[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@windowsmedia[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@sexy-photos[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@xxxcounter[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@serving-sys[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@com[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@doubleclick[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@fastclick[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@sexy-flexy-girls[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@weborama[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@sexlist[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@server.iad.liveperson[3].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@tradedoubler[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@adserver.aol[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@tribalfusion[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@metriweb[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@bluestreak[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@community.codemasters[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@incredimail[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@www.buyonlinetraffic[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@mediaonenetwork[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@sexy-flexy-girls[3].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@adserver.adnpc[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@www.cibleclick[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@gamespy[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@comonline[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@findwhat[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@gamespyid[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@indextools[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@media.adrevolver[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@stat.dealtime[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@mediaplex[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@hotlog[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@server.iad.liveperson[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@bizrate[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@counter2.sextracker[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@counter7.sextracker[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@statcounter[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@2o7[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@zedo[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@247realmedia[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@adviva[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@bs.serving-sys[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@media.adrevolver[3].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@fl01.ct2.comclick[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@casalemedia[2].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@statse.webtrendslive[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Cookies\ophelie@smartadserver[1].txt	Supprimé Trace.TrackingCookie
C:\Documents and Settings\ophelie\Application Data\Mozilla\Firefox\Profiles\h69mwndu.default\cookies.txt:10	Supprimé Trace.TrackingCookie
Value: HKEY_CLASSES_ROOT\CLSID\{394011F0-6D5C-42a3-96C6-24B9AD6B010C}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{4956C5F5-D9A8-4CBB-8994-F53CF55CFDF5}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{591A5CFF-3172-4020-A067-238542DDE9C2}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{5E6309F2-9971-4683-9445-F548E81BEC07}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{9AA8DF47-B8FE-47da-AB1A-2DAA0DA0B646}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{A4F1E383-B493-4580-8DB6-5CC89CBAAC53}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{BF00DBCC-90A2-4f46-8171-7D4F929D035F}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{C3B7B25C-6B8B-481A-BC48-59F9A6F7B69A}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{D07E630D-A850-4f11-AD29-3D3848B67EFE}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_CLASSES_ROOT\CLSID\{D427C22F-23FB-4E51-A8B8-70F2036ED3BA}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{394011F0-6D5C-42a3-96C6-24B9AD6B010C}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4956C5F5-D9A8-4CBB-8994-F53CF55CFDF5}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{591A5CFF-3172-4020-A067-238542DDE9C2}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E6309F2-9971-4683-9445-F548E81BEC07}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9AA8DF47-B8FE-47da-AB1A-2DAA0DA0B646}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A4F1E383-B493-4580-8DB6-5CC89CBAAC53}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BF00DBCC-90A2-4f46-8171-7D4F929D035F}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C3B7B25C-6B8B-481A-BC48-59F9A6F7B69A}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D07E630D-A850-4f11-AD29-3D3848B67EFE}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D427C22F-23FB-4E51-A8B8-70F2036ED3BA}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Shareaza Lite
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Macrogaming\SweetIM --> InstallDir	Supprimé Trace.Registry.Sweet IM
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run --> SweetIM	Supprimé Trace.Registry.Sweet IM
c:\program files\macrogaming\sweetim\conf\adapter.xml	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\conf\logger.xml	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\conf\messages.xml	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\conf\sweetim.xml	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\conf\sweetimapp.xml	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\conf\users\main_user_config.xml	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\data\contentdb\cache_indx.dat	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\default.xml	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgadaptersproxy.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgarchive.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgcommon.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgcommunication.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgconfig.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgflashplayer.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mghooking.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgieplayer.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mglogger.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgmsnauto.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgmsnmessengeradapter.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgsweetim.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgupdatesupport.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\mgxml_wrapper.dll	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim\sweetim.exe	Supprimé Trace.File.Sweet IM
c:\program files\macrogaming\sweetim	Supprimé Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\conf	Supprimé Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\conf\users	Supprimé Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\data	Supprimé Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\data\contentdb	Supprimé Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\logs	Supprimé Trace.Directory.Sweet IM
c:\program files\macrogaming\sweetim\update	Supprimé Trace.Directory.Sweet IM
c:\program files\ares	Supprimé Trace.Directory.Ares
Value: HKEY_CLASSES_ROOT\CLSID\{4D1C4E81-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_CLASSES_ROOT\CLSID\{4D1C4E89-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_CLASSES_ROOT\CLSID\{4D1C4E8B-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_CLASSES_ROOT\CLSID\{630D6140-04C5-4db0-B27A-020D766FF09B}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1C4E81-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1C4E89-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1C4E8B-A32A-416b-BCDB-33B3EF3617D3}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{630D6140-04C5-4db0-B27A-020D766FF09B}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall --> DisplayName	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall --> HelpLink	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall --> Publisher	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall --> UninstallString	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall --> UrlInfoAbout	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> PM-Home	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> PM-Points	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> PM-Redeem	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> PM-Settings	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> PM-Wallet	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar\Partner --> test	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> Build	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> CacheDir	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> CfgUrl	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> ConfigDateStamp	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> ConfigRevision	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> ConfigRevisionURL	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> CurInstall	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> Dir	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> Flags	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> HistoryDir	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> HTMLMenuRevision	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> Id	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> pid	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> pl	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> PluginPath	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> SettingsDir	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> ShzmCurInstall	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> sr	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Need2Find\bar --> Visible	Supprimé Trace.Registry.Need2Find Bar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BBCF06C-DCD7-495D-80DF-CDD5399D0FF8} --> AppID	Supprimé Trace.Registry.Altnet
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E813099D-5529-47F4-9B37-4AFAFCB00A43}\InProcServer32 --> ThreadingModel	Supprimé Trace.Registry.Altnet
c:\program files\need2find\bar\1.bin\n2ffxtbr.jar	Supprimé Trace.File.Need2Find Bar
c:\program files\need2find\bar\1.bin\n2ntstbr.jar	Supprimé Trace.File.Need2Find Bar
c:\program files\need2find\bar\1.bin\partner.dat	Supprimé Trace.File.Need2Find Bar
c:\program files\need2find\bar\cache\files.ini	Supprimé Trace.File.Need2Find Bar
c:\program files\need2find\bar\history\search	Supprimé Trace.File.Need2Find Bar
c:\program files\need2find\bar\settings\prevcfg.htm	Supprimé Trace.File.Need2Find Bar
c:\program files\need2find	Supprimé Trace.Directory.Need2Find Bar
c:\program files\need2find\bar	Supprimé Trace.Directory.Need2Find Bar
c:\program files\need2find\bar\1.bin	Supprimé Trace.Directory.Need2Find Bar
c:\program files\need2find\bar\cache	Supprimé Trace.Directory.Need2Find Bar
c:\program files\need2find\bar\history	Supprimé Trace.Directory.Need2Find Bar
c:\program files\need2find\bar\settings	Supprimé Trace.Directory.Need2Find Bar
c:\program files\altnet	Supprimé Trace.Directory.Altnet
c:\program files\altnet\download manager	Supprimé Trace.Directory.Altnet
Key: HKEY_CLASSES_ROOT\clsid\{3646c2bd-3554-49ca-8125-44deefb881de}	Supprimé Trace.Registry.SearchCentrix
Key: HKEY_CLASSES_ROOT\clsid\{3f4d4f88-0198-4921-b630-957f3eb814e0}	Supprimé Trace.Registry.SearchCentrix
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{3646c2bd-3554-49ca-8125-44deefb881de}	Supprimé Trace.Registry.SearchCentrix
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{3f4d4f88-0198-4921-b630-957f3eb814e0}	Supprimé Trace.Registry.SearchCentrix
Key: HKEY_CLASSES_ROOT\clsid\{2ab289ae-4b90-4281-b2ae-1f4bb034b647}	Supprimé Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\clsid\{59879fa4-4790-461c-a1cc-4ec4de4ca483}	Supprimé Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\rxresult.rxresultfilter.1	Supprimé Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\rxresult.rxresultfilter	Supprimé Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\rxresult.rxresulttracker.1	Supprimé Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\rxresult.rxresulttracker	Supprimé Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\typelib\{05563f82-69a7-40a6-8670-153b635a7ef6}	Supprimé Trace.Registry.RXToolbar
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{59879fa4-4790-461c-a1cc-4ec4de4ca483}	Supprimé Trace.Registry.RXToolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run --> SemanticInsight	Supprimé Trace.Registry.RXToolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\SemanticInsight --> AppDir	Supprimé Trace.Registry.RXToolbar
Key: HKEY_CLASSES_ROOT\clsid\{4d1c4e81-a32a-416b-bcdb-33b3ef3617d3}	Supprimé Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\clsid\{630d6140-04c5-4db0-b27a-020d766ff09b}	Supprimé Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\need2findbar.settingsplugin.1	Supprimé Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\need2findbar.settingsplugin	Supprimé Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\need2findbar.toolbarplugin.1	Supprimé Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\need2findbar.toolbarplugin	Supprimé Trace.Registry.Need2Find
Key: HKEY_CLASSES_ROOT\clsid\{014da6c9-189f-421a-88cd-07cfe51cff10}	Supprimé Trace.Registry.MyWay
Key: HKEY_CLASSES_ROOT\clsid\{f78b32d6-d6d8-4137-a18f-91ebe1a4aedb}	Supprimé Trace.Registry.KaZaA
Key: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\software\kazaa	Supprimé Trace.Registry.KaZaA
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\software\kazaa --> tmp	Supprimé Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\classes\appid\{8b0fef15-54dc-49f5-8377-8172de975f75}	Supprimé Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\classes\appid\{99a8e2b2-3405-4c0d-9110-131c14caaf62}	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\in --> b0	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\in --> b0seconds	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\in --> b1	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\lastestimate --> b	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\lastestimate --> time	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\out --> b0	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\out --> b0seconds	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\out --> b1	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\cloudload --> sharedir	Supprimé Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\kazaa\connectioninfo	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\connectioninfo --> kazaanet	Supprimé Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\kazaa\localcontent	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\localcontent --> databasedir	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa\localcontent --> downloaddir	Supprimé Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\kazaa	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa --> listenport	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\software\kazaa --> tmp	Supprimé Trace.Registry.KaZaA
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app management\arpcache\p2p networking	Supprimé Trace.Registry.KaZaA
Value: HKEY_CLASSES_ROOT\CLSID\{B7156514-A76C-4545-9D5B-A4E1D02C7AEC}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.KaZaA
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Kazaa\Advanced --> Status	Supprimé Trace.Registry.KaZaA
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Kazaa\Settings --> Date	Supprimé Trace.Registry.KaZaA
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Kazaa\Settings --> UseCount	Supprimé Trace.Registry.KaZaA
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Kazaa\Transfer --> NoUploadLimitWhenIdle	Supprimé Trace.Registry.KaZaA
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7156514-A76C-4545-9D5B-A4E1D02C7AEC}\InprocServer32 --> ThreadingModel	Supprimé Trace.Registry.KaZaA
Key: HKEY_CLASSES_ROOT\typelib\{5830698f-7fc0-40cd-a453-9a0cafdf3a64}	Supprimé Trace.Registry.Grokster
Key: HKEY_CLASSES_ROOT\typelib\{676f6d1d-c559-42a9-860b-27c1477b7179}	Supprimé Trace.Registry.Grokster
Key: HKEY_CLASSES_ROOT\typelib\{bff4f684-677e-44f4-8c74-1d575c950e10}	Supprimé Trace.Registry.Grokster
Key: HKEY_CLASSES_ROOT\clsid\{1d3bce37-7834-4579-8169-e67681420a98}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\clsid\{9bbcf06c-dcd7-495d-80df-cdd5399d0ff8}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\clsid\{c15b7ea2-a360-43e8-a591-5faedc7c4e1d}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\clsid\{def37997-d9c9-4a4b-bf3c-88f99eaceec2}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\clsid\{e813099d-5529-47f4-9b37-4afafcb00a43}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{258a3625-183b-4477-aee2-ea54df6d878d}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{29e825aa-13bc-457c-806a-d72e4a25b3c5}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{9d4548ce-92fd-4c6c-ae7f-3dbe3bc763d8}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{ad5bc1f0-72d8-44b3-8e3d-8e8fecce43fb}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{e79dadc6-18d0-4a2a-831f-d196d41f8438}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_CLASSES_ROOT\interface\{e813099d-5529-47f4-9b37-4afafcb00a43}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{1d3bce37-7834-4579-8169-e67681420a98}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{9bbcf06c-dcd7-495d-80df-cdd5399d0ff8}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Value: HKEY_LOCAL_MACHINE\software\classes\clsid\{9bbcf06c-dcd7-495d-80df-cdd5399d0ff8} --> appid	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{c15b7ea2-a360-43e8-a591-5faedc7c4e1d}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Value: HKEY_LOCAL_MACHINE\software\classes\clsid\{c15b7ea2-a360-43e8-a591-5faedc7c4e1d} --> appid	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{def37997-d9c9-4a4b-bf3c-88f99eaceec2}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{e813099d-5529-47f4-9b37-4afafcb00a43}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{258a3625-183b-4477-aee2-ea54df6d878d}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{29e825aa-13bc-457c-806a-d72e4a25b3c5}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{9d4548ce-92fd-4c6c-ae7f-3dbe3bc763d8}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{ad5bc1f0-72d8-44b3-8e3d-8e8fecce43fb}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{e79dadc6-18d0-4a2a-831f-d196d41f8438}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{e813099d-5529-47f4-9b37-4afafcb00a43}	Supprimé Trace.Registry.Cydoor.TOPicks.a
Value: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run --> altnetpointsmanager	Supprimé Trace.Registry.Cydoor.TOPicks.a
Value: HKEY_CLASSES_ROOT\arlnk --> URL Protocol	Supprimé Trace.Registry.Ares
Value: HKEY_USERS\S-1-5-21-2754550488-2983360856-693702954-1006\software\microsoft\windows\currentversion\run --> ares	Supprimé Trace.Registry.Ares
c:\windows\smdat32a.sys	Supprimé Trace.File.Twain-Tech
c:\windows\smdat32m.sys	Supprimé Trace.File.Twain-Tech
c:\documents and settings\ophelie\local settings\temp\873101.tmp	Supprimé Trace.File.Cydoor.TOPicks.a
c:\program files\altnet\download manager\admdata.dll	Supprimé Trace.File.Cydoor.TOPicks.a
c:\program files\ares\tcpip_patcher.sys	Supprimé Trace.File.Ares
c:\program files\ares\tcpippatcherdll.dll	Supprimé Trace.File.Ares
c:\program files\altnet	Supprimé Trace.Directory.TopSearch
c:\program files\altnet\points manager\localpages	Supprimé Trace.Directory.TopSearch
c:\program files\altnet\points manager\skin	Supprimé Trace.Directory.TopSearch
c:\program files\need2find	Supprimé Trace.Directory.P2PNetworking
c:\documents and settings\ophelie\local settings\temp\admcache	Supprimé Trace.Directory.KaZaA
c:\program files\kazaa	Supprimé Trace.Directory.KaZaA
c:\program files\kazaa\my shared folder	Supprimé Trace.Directory.KaZaA
c:\program files\instafink	Supprimé Trace.Directory.InstaFinder
c:\program files\altnet\download manager	Supprimé Trace.Directory.Cydoor.TOPicks.a
c:\program files\altnet\points manager	Supprimé Trace.Directory.Cydoor.TOPicks.a

Supprimé

Fichiers: 	3
Traces: 	203
Cookies: 	51

madmax069 · Answer

Je viens de finir spybot j'ai tous fait par contre il m'a mit 6 dossiers en sauvegarde que dois-je en faire.

Je suis entrainde faire une analyse AVG met le rapport des qu'il a fini si il ne plante pas sinon je recommence en analyse rapide.

madmax069 · Answer

Bonjour, 
 apres nouvelle analyse avec avg toujours en rapide car mon ordi plante encore en analyse complete voici le rapport:
Par contre que dois je faire des fichiers q'il a trouvé les supprimer?

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	11:15:53 27/09/2007

 + Résultat de l'analyse:	



HKLM\SOFTWARE\Altnet -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\ADM -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\ADM\ADMCache -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard\Messages -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard\Settings -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard\Setup -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\Dashboard\Temp Internet Shares -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\DownloadManager -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\LocalFiles -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Altnet\TopSearch -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM.ADM -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM.ADM.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM.ADM\CLSID -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM.ADM\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule\CLSID -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AltnetDM -> Adware.Altnet : Ignoré.
C:\WINDOWS\Downloaded Program Files\installer2.dll -> Adware.ClickMedia : Ignoré.
HKLM\SOFTWARE\Classes\CLSID\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59879FA4-4790-461c-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
HKU\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Ignoré.
C:\WINDOWS\Downloaded Program Files\popcaploader.dll -> Not-A-Virus.Downloader.Win32.PopCap.a : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@247realmedia[1].txt -> TrackingCookie.247realmedia : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@3suisses.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@canalplus.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@heavycom.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@karavel.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@numericable.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@4.adbrite[1].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@adbrite[2].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ad.adition[1].txt -> TrackingCookie.Adition : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@adrevolver[1].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@media.adrevolver[3].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@advertising[2].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@adviva[2].txt -> TrackingCookie.Adviva : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@casalemedia[2].txt -> TrackingCookie.Casalemedia : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@cz3.clickzs[1].txt -> TrackingCookie.Clickzs : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@com[1].txt -> TrackingCookie.Com : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@e-2dj6whk4qjdjoep.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@fastclick[1].txt -> TrackingCookie.Fastclick : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@findwhat[1].txt -> TrackingCookie.Findwhat : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ehg-ati.hitbox[2].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@hotlog[2].txt -> TrackingCookie.Hotlog : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@search.live[1].txt -> TrackingCookie.Live : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@image.masterstats[1].txt -> TrackingCookie.Masterstats : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
:mozilla.10:C:\Documents and Settings\ophelie\Application Data\Mozilla\Firefox\Profiles\h69mwndu.default\cookies.txt -> TrackingCookie.Netflame : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@overture[2].txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@www.paypal[1].txt -> TrackingCookie.Paypal : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ads.planetactive[2].txt -> TrackingCookie.Planetactive : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ads-205.quarterserver[1].txt -> TrackingCookie.Quarterserver : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@revsci[1].txt -> TrackingCookie.Revsci : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@sexlist[1].txt -> TrackingCookie.Sexlist : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@counter2.sextracker[1].txt -> TrackingCookie.Sextracker : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@counter7.sextracker[1].txt -> TrackingCookie.Sextracker : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@statcounter[1].txt -> TrackingCookie.Statcounter : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@tacoda[2].txt -> TrackingCookie.Tacoda : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@bnpparibas.weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@m.webtrends[2].txt -> TrackingCookie.Webtrends : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@yadro[1].txt -> TrackingCookie.Yadro : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@d3.zedo[1].txt -> TrackingCookie.Zedo : Ignoré.
C:\Documents and Settings\ophelie\Cookies\ophelie@zedo[2].txt -> TrackingCookie.Zedo : Ignoré.


Fin du rapport

clownface · Answer

Bonsoir,

Je viens de finir spybot j'ai tous fait par contre il m'a mit 6 dossiers en sauvegarde que dois-je en faire. <-- de quels dossiers s'agit-il ?

clownface · Answer

voici la manip suivante : http://www.malekal.com/Altnet.php

madmax069 · Answer

Bonjour, 

Pour les dossier de spybot ce sont : Altnet, zlob.DNS.changer, connectMFCapplication, instafink, messengerskinner.RTK et spyware secure.

clownface · Answer

impec, poubelle !!
refais un hijack ensuite

madmax069 · Answer

OK ,voici le rapport

Logfile of HijackThis v1.99.1
Scan saved at 23:18:05, on 27/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Saitek\Software\ProfilerU.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\ProfilerU.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [helpr] C:\Program Files\SETI\helper.exe -loader -nolog
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /M "Stylus DX3800" /EF "HKCU"
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [FlyAway] C:\DOCUME~1\ophelie\LOCALS~1\Temp\QZTEMP\FlyAway.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://www.m6video.fr/1click/install/files/installer2.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://ophetsteph.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - 
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.netprint.com/view/uploader/ImageUploader3.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://arcade.icq.com/carlo/zuma/popcaploader_v5.cab
O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/
O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A} (MCSendMessageHandler Class) - http://xtraz.icq.com/xtraz/activex/MISBH.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

clownface · Answer

je vais regarder ça de plus près.

clownface · Answer

tu peux cocher et fixer ces lignes :

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)

et celles-ci, si elles ne te disent rien :

O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A} (MCSendMessageHandler Class) - http://xtraz.icq.com/xtraz/activex/MISBH.cab
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://www.m6video.fr/1click/install/files/installer2.cab
O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/

Connais-tu ce programme ? 
C:\Program Files\SETI\helper.exe <-- c'est toi qui l'a installé ou ça te dit rien ?

madmax069 · Answer

Bonjour, 

Connais-tu ce programme ? 
C:\Program Files\SETI\helper.exe <-- c'est toi qui l'a installé ou ça te dit rien ? 
Non je connais pas du tout ce programme.
J'ai cocher et fixer les lignes que tu m'a indiqué.

Mais malheureusement j'ai toujours ce problème de message d'erreur quand je lance certain programme.

clownface · Answer

bonsoir,

refais un avg stp

madmax069 · Answer

Bonsoir,

Ok je colle le rapport:

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	20:51:08 28/09/2007

 + Résultat de l'analyse:	



HKU\S-1-5-21-2754550488-2983360856-693702954-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@divx.112.2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@adtech[1].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@advertising[1].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@bluestreak[2].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.10:C:\Documents and Settings\ophelie\Application Data\Mozilla\Firefox\Profiles\h69mwndu.default\cookies.txt -> TrackingCookie.Netflame : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Documents and Settings\ophelie\Cookies\ophelie@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.


Fin du rapport

en sachent bien que j'ai effectuer les actions demande par AVG c'esta dire supprimer ou quarantaine

A+

madmax069 · Answer

Ok est la je te remet le dernier rapport d'HJ

Logfile of HijackThis v1.99.1
Scan saved at 20:58:19, on 28/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Saitek\Software\ProfilerU.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\ProfilerU.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [helpr] C:\Program Files\SETI\helper.exe -loader -nolog
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /M "Stylus DX3800" /EF "HKCU"
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [FlyAway] C:\DOCUME~1\ophelie\LOCALS~1\Temp\QZTEMP\FlyAway.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://ophetsteph.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - 
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.netprint.com/view/uploader/ImageUploader3.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://arcade.icq.com/carlo/zuma/popcaploader_v5.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

clownface · Answer

peux tu refaire la meme chose en mode sans echec ?
scan complet toujours pas possible ?

madmax069 · Answer

OK ,en mode sans echec

Pour etre franc j'ai pas ressayer je peux essayer en mode sans echec

Je le ferai en fin de soiree par contre peut tu me dire si mon cas est desespere ou pas ? merci

clownface · Answer

lol non pas désespéré, on a enlevé le plus gros,
reste un recalcitrant..

madmax069 · Answer

Bonjour,desole pour le retard.Donc analyse en mode sans echec avec AVG pas en mode complet car toujours pas possible .


AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	13:54:47 29/09/2007

 + Résultat de l'analyse:	



C:\Documents and Settings\ophelie\Cookies\ophelie@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@adviva[1].txt -> TrackingCookie.Adviva : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@overture[2].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\ophelie\Cookies\ophelie@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.


Fin du rapport

clownface · Answer

Bonjour,

refais un a-squared et un spybot en sans echec, voir s'ils en trouvent encore comme ça
puis repostes un log hijackthis

madmax069 · Answer

bonjour,

Je viens juste de voir ton message, là je part au boulot, je risque de rentrer tard.

Je fait ça dés demain matin.

Merci

Mad

madmax069 · Answer

Bonjour,j'ai effectuer les scans en mode sans echec il m'en a trouve encore j'ai tout supprimeret je te mes le dernier rapport HJ

Logfile of HijackThis v1.99.1
Scan saved at 11:50:38, on 02/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Saitek\Software\ProfilerU.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\ProfilerU.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [helpr] C:\Program Files\SETI\helper.exe -loader -nolog
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /M "Stylus DX3800" /EF "HKCU"
O4 - HKCU\..\Run: [FlyAway] C:\DOCUME~1\ophelie\LOCALS~1\Temp\QZTEMP\FlyAway.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: ubisoft register.lnk = C:\Program Files\Ubisoft\Eagle Dynamics\Lock On\Register\schedule.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://ophetsteph.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - 
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.netprint.com/view/uploader/ImageUploader3.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://arcade.icq.com/carlo/zuma/popcaploader_v5.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

clownface · Answer

Bonsoir,

ça a l'air d'aller... mais, malgré tout ça on a encore jamais vu un scan antivirus...
voici 3 antivirus en ligne, ça serait bien qu'il y en ai un qui aille jusqu'au bout et qu'on ai un rapport : http://www.zebulon.fr/outils/antivirus/antivirus-en-ligne.php

PC infecte par trojan

37 réponses

Votre réponse

Newsletters