JS/Wonka

Question

Bonjour, 

Je suis infecté avec JS/Wonka et je n'arrive pas à m'en défaire. Voici le log HijackThis

Logfile of HijackThis v1.99.1
Scan saved at 22:13:55, on 28/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
c:\program files\a-squared free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\SHVRTF.EXE
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Network Associates\VirusScan\shcfg32.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\COTTIN~1\LOCALS~1\Temp\Répertoire temporaire 1 pour hijackthis_199[1].zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Protect] SHVRTF.EXE
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypix.com/importer/ImageUploader4.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2C853624-0A88-4421-BDA7-EA50E77AD14A}: NameServer = 85.255.116.82,85.255.112.117
O17 - HKLM\System\CCS\Services\Tcpip\..\{2D297BC4-B88B-44D5-9C72-962C14027EF7}: NameServer = 85.255.116.82,85.255.112.117
O17 - HKLM\System\CCS\Services\Tcpip\..\{B3090FD2-7212-4F99-AA8E-5EA1E7EE2031}: NameServer = 85.255.116.82,85.255.112.117
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.82 85.255.112.117
O17 - HKLM\System\CS1\Services\Tcpip\..\{2C853624-0A88-4421-BDA7-EA50E77AD14A}: NameServer = 85.255.116.82,85.255.112.117
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.82 85.255.112.117
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

philae83 · Answer

bonsoir,

je te prépare les manips à effectuer

philae83 · Answer

voici :

* Télécharge le FixWareout d'un de ces deux sites sur le bureau:
http://download.bleepingcomputer.com/lonny/Fixwareout.exe
http://downloads.subratam.org/Fixwareout.exe

Lance le fix: clique sur Next, puis Install, puis assure toi que "Run fixit" est activé puis clique sur Finish.
Le fix va commencer, suis les messages à l'écran. Il te sera demandé de redémarrer ton ordinateur, fais le.
Ton système mettra un peu plus de temps au démarrage, c'est normal.

Quand ton système aura redémarré, suis les invites des messages. Ensuite lance HijackThis. Clique sur Scan et coche les lignes suivantes:

O17 - HKLM\System\CCS\Services\Tcpip\..\{2C853624-0A88-4421-BDA7-EA50E77AD14A}: NameServer = 85.255.116.82,85.255.112.117
O17 - HKLM\System\CCS\Services\Tcpip\..\{2D297BC4-B88B-44D5-9C72-962C14027EF7}: NameServer = 85.255.116.82,85.255.112.117
O17 - HKLM\System\CCS\Services\Tcpip\..\{B3090FD2-7212-4F99-AA8E-5EA1E7EE2031}: NameServer = 85.255.116.82,85.255.112.117
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.82 85.255.112.117
O17 - HKLM\System\CS1\Services\Tcpip\..\{2C853624-0A88-4421-BDA7-EA50E77AD14A}: NameServer = 85.255.116.82,85.255.112.117
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.82 85.255.112.117 

Clique sur Fix Checked. Ferme HijackThis et clique sur OK pour continuer la procédure.

A la fin du fix, tu auras peut-être encore besoin de redémarrer le PC.

Au final, poste le contenu du fichier C:\fixwareout\report.txt avec un nouveau rapport HijackThis

jaco44 · Answer

Bonjour, 

le contenu de report.txt

Username "Cottineau" - 28/09/2007 22:42:11 [Fixwareout edited 9/01/2007]

~~~~~ Prerun check
HKLM\SOFTWARE\~\Winlogon\ "System"="kdvok.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
"nameserver"="85.255.116.82 85.255.112.117" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services	cpip\parameters\interfaces\{2C853624-0A88-4421-BDA7-EA50E77AD14A} 
"nameserver"="85.255.116.82,85.255.112.117" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services	cpip\parameters\interfaces\{2D297BC4-B88B-44D5-9C72-962C14027EF7} 
"nameserver"="85.255.116.82,85.255.112.117" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services	cpip\parameters\interfaces\{B3090FD2-7212-4F99-AA8E-5EA1E7EE2031} 
"nameserver"="85.255.116.82,85.255.112.117" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services	cpip\parameters\interfaces\{2D297BC4-B88B-44D5-9C72-962C14027EF7}
"DhcpNameServer"="85.255.116.82,85.255.112.117" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services	cpip\parameters\interfaces\{A56DF424-8393-4323-B00C-724FAA8C37EF}
"DhcpNameServer"="85.255.116.82,85.255.112.117" <Value cleared.

Cache de résolution DNS vidé.


System was rebooted successfully. 
 
~~~~~ Postrun check 
HKLM\SOFTWARE\~\Winlogon\ "system"="" 
....
....
~~~~~ Misc files. 
....
~~~~~ Checking for older varients.
....

~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Smapp"="C:\Program Files\Analog Devices\SoundMAX\SMTray.exe"
"NvCplDaemon"="RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit"
"RemoteControl"="\"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe\""
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe"
"Protect"="SHVRTF.EXE"
"NWEReboot"=""
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe"
"SunJavaUpdateSched"="\"C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe\""
"Adobe Reader Speed Launcher"="\"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe\""
"ShStatEXE"="\"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE\" /STANDALONE"
"McAfeeUpdaterUI"="\"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe\" /StartedFromRunKey"
"Network Associates Error Reporting Service"="\"C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe\""
"Google Desktop Search"="\"C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe\" /startup"
"KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00
"!AVG Anti-Spyware"="\"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe\" /minimized"
"Look 'n' Stop"="\"C:\Program Files\Soft4Ever\looknstop\looknstop.exe\" -auto"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe"
"MsnMsgr"="\"C:\Program Files\MSN Messenger\MsnMsgr.Exe\" /background"
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~


Le contenu de 

Logfile of HijackThis v1.99.1
Scan saved at 22:54:53, on 28/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
c:\program files\a-squared free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\SHVRTF.EXE
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\DOCUME~1\COTTIN~1\LOCALS~1\Temp\Répertoire temporaire 1 pour hijackthis_199[1].zip\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Protect] SHVRTF.EXE
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypix.com/importer/ImageUploader4.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

philae83 · Answer

parfait, on continue

IMPORTANT / réinstalle hijackthis correctement, il ne doit pas être installé dans les fichiers temporaires

puis

* lance hijackthis puis coche ces lignes :

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install 
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe ----inutile au démarrage
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" 
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k 
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe ----sauf si tu t'en sers
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) 
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab 
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypix.com/importer/ImageUploader4.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab 

* toutes applications fermées et HORS CONNEXION, clique sur "fix checked"

puis lance AVG AS et paramètre le comme ceci :
Clique sur le bouton Analyse (de la barre d'outils)

puis fait dans l'ordre stp. Tu sauvegardes le rapport APRES avoir mis les actions.

Puis sur l'onglet Paramètres,
sous : "Comment réagir "clique sur Actions recommandées. Sélectionne Quarantaine.

Reviens à l'onglet Analyse. Clique sur Analyse complète du système.

A la fin du scan, choisis l'option 3

"Appliquer toutes les actions " en bas.

Clique sur "Enregistrer le rapport".

Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

Poste le.

jaco44 · Answer

Bonjour, 

le rapport AVG Anti-Spyware :

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	23:42:29 28/09/2007

 + Résultat de l'analyse:	



C:\Documents and Settings\Cottineau\Cookies\cottineau@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@adviva[1].txt -> TrackingCookie.Adviva : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@casalemedia[1].txt -> TrackingCookie.Casalemedia : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Cottineau\Cookies\cottineau@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.


Fin du rapport

philae83 · Answer

que des cookies

* Fait un scan antivirus en ligne ICI
https://www.bitdefender.fr/
et copie colle le résultat ici
* En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
* Dans la nouvelle fenêtre, clique sur I agree
* La fenêtre change encore, clique sur Click here to scan
* Les signatures se chargent, etc.

tuto en image

http://pageperso.aol.fr/rginformatique/mapage/defender.htm

et tu me diras ensuite comment se comporte ton pc

jaco44 · Answer

Bonjour, Le résultat du scan : BitDefender Online Scanner - Rapport d'analyse

BitDefender Online Scanner

Rapport d'analyse généré à: Sat, Sep 29, 2007 - 00:24:55

Voie d'analyse: C:\;D:\;E:\;G:\;H:\;I:\;J:\;

Statistiques
Temps	00:22:22
Fichiers	124391
Directoires	4301
Secteurs de boot	3
Archives	1058
Paquets programmes	8529

Résultats
Virus identifiés	4
Fichiers infectés	9
Fichiers suspects	0
Avertissements	0
Désinfectés	0
Fichiers effacés	9

Info sur les moteurs
Définition virus	824311
Version des moteurs	AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Analyse des plugins	14
Archive des plugins	38
Unpack des plugins	7
E-mail plugins	6
Système plugins	1

Paramètres d'analyse
Première action	Désinfecté
Seconde Action	Supprimé
Heuristique	Oui
Acceptez les avertissements	Oui
Extensions analysées	*;
Excludez les extensions
Analyse d'emails	Oui
Analyse des Archives	Oui
Analyser paquets programmes	Oui
Analyse des fichiers	Oui
Analyse de boot	Oui

Fichier analysé	Statut
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8=>BnnnnBaa.class	Infecté par: Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8=>BnnnnBaa.class	Echec de la désinfection
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8=>BnnnnBaa.class	Supprimé
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8	Mis à jour
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8=>VaannnaaBaa.class	Infecté par: Trojan.Java.Classloader.E
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8=>VaannnaaBaa.class	Echec de la désinfection
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8=>VaannnaaBaa.class	Supprimé
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8	Mis à jour
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8=>Dnnny.class	Infecté par: Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8=>Dnnny.class	Echec de la désinfection
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8=>Dnnny.class	Supprimé
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\38\295aa0e6-14f201c8	Mis à jour
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Matrix.class	Infecté par: Java.Trojan.Downloader.OpenStream.C
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Matrix.class	Echec de la désinfection
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Matrix.class	Supprimé
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee	Mis à jour
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Counter.class	Infecté par: Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Counter.class	Echec de la désinfection
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Counter.class	Supprimé
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee	Mis à jour
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Dummy.class	Infecté par: Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Dummy.class	Echec de la désinfection
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Dummy.class	Supprimé
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee	Mis à jour
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Parser.class	Infecté par: Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Parser.class	Echec de la désinfection
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee=>Parser.class	Supprimé
C:\Documents and Settings\Cottineau\Application Data\Sun\Java\Deployment\cache\6.0\58\57fba77a-44bbc4ee	Mis à jour
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeExpand.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeExpand.htm=>(IFRAME)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeExpand.htm=>(JAVASCRIPT 4)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeFirstPage.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeFirstPage.htm=>(IFRAME)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeFirstPage.htm=>(JAVASCRIPT 4)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeLastPage.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeLastPage.htm=>(IFRAME)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeLastPage.htm=>(JAVASCRIPT 4)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeNextPage.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeNextPage.htm=>(IFRAME)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeNextPage.htm=>(JAVASCRIPT 4)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforePreviousPage.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforePreviousPage.htm=>(IFRAME)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforePreviousPage.htm=>(JAVASCRIPT 4)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtButtonClick.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtButtonClick.htm=>(IFRAME)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtButtonClick.htm=>(JAVASCRIPT 6)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeRender.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeRender.htm=>(IFRAME)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCVBA10.CHM_1036=>/html/ocevtBeforeRender.htm=>(JAVASCRIPT 4)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/#SYSTEM	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/office10.css	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/ExpCollapse.js	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/officeupdate.css	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/startpage.css	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/tfplug.js	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/tfplug.js=>(IFRAME)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxconAboutDesigningPublishingSpreadsheet.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxconAboutDesigningPublishingSpreadsheet.htm=>(JAVASCRIPT 6)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxconHowUsersInBrowserCanWorkWithSpreadsheet.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxconHowUsersInBrowserCanWorkWithSpreadsheet.htm=>(JAVASCRIPT 5)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxconAboutWorkingWithSpreadsheetPublishedFromMicrosoftExcel.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxconAboutSpreadsheetToolbarPropertyToolbox.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxconAboutSpreadsheetToolbarPropertyToolbox.htm=>(JAVASCRIPT 5)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/AboutViewModeForOfficeWebComponents.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/acconAboutMicrosoftOfficeWebComponents.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/AboutLicensingForOfficeWebComponents.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/AboutLicensingForOfficeWebComponents.htm=>(JAVASCRIPT 4)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/dhowShowColHeader.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/dhowGridlines.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/dhowShowToolbar.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/dhowUndo.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/dhowSave.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/dhowScrollbars.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/dhowDisplayPart.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/dhowFreezePanes.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/dhowAutoFit.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/dhowMoveDirection.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxhowCreateMicrosoftOfficeSpreadsheet.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxhowUseSpreadsheetPropertyToolbox.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxhowCreateChartForSpreadsheet.htm	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxhowCreateChartForSpreadsheet.htm=>(JAVASCRIPT 4)	Nettoyé
C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\YA561403.CAB=>OWCDSS10.CHM_1036=>/html/wxhowPrintSpreadsheet.htm	Nettoyé
C:\MSOCache\All Users\9000040c-600

philae83 · Answer

bonsoir,

bien, normalement il a bien nettoyé.

as tu encore des problèmes ?

JS/Wonka

8 réponses

Discussions similaires

Newsletters