Adssite_sidebar.dll
Résolu
Bonjour,
chaque fois que je lance hijackthis + analyse du log, 2 fichiers sont estimés dangereux (adssite_sidebar.dll, et njs11.dll) je les enleve mais ils reviennent à chaque redemarrage. sont ils des fichiers virus ou autres ???? help please
chaque fois que je lance hijackthis + analyse du log, 2 fichiers sont estimés dangereux (adssite_sidebar.dll, et njs11.dll) je les enleve mais ils reviennent à chaque redemarrage. sont ils des fichiers virus ou autres ???? help please
19 réponses
-
bonsoir,
voici ce qu'il faut faire : http://www.malekal.com/adssite_gzmrotate.php
conserve les rapports (au cas ou tout ne soit pas résolu ensuite, je peux te les demander)
postes un rapport hijackthis lorsque tu as terminé
-
merci pour la reponse; comme je suis novice je t'envoies le log hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:19:08, on 10/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
D:\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
F:\papa\divers\Antidote\Gestionnaire Antidote.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\bin\iPodService.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3D08FA5E-3441-4E7F-8EBB-AD40E64E9F82} - C:\WINDOWS\system32\compatU.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ads_optimizer - {9C8A568E-4201-478a-8536-526CF371D2E2} - C:\WINDOWS\system32\nsj11.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] D:\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Delete Phone Bird Five] C:\Documents and Settings\All Users\Application Data\wave boob delete phone\Ace 32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WinAble] C:\Program Files\WinAble\winable.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] F:\papa\divers\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Tray Trust] C:\DOCUME~1\BOUHMA~1\APPLIC~1\COPYBO~1\SpamLog.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{CFC7B16D-D67F-4D0D-B98D-1018BD116B71}: NameServer = 208.67.222.222 193.55.10.102
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
-
relances hijackthis,
coches ces lignes
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ads_optimizer - {9C8A568E-4201-478a-8536-526CF371D2E2} - C:\WINDOWS\system32\nsj11.dll
et fais "fix checked"
continues la manip décrite sur le lien, postes les rapports clean et avg antispy.
-
pour clean dois je faire d'abord 1 ou 2 etc...(pour scanner)
-
voici le nouveau log
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:10:56, on 10/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
D:\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
F:\papa\divers\Antidote\Gestionnaire Antidote.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\bin\iPodService.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3D08FA5E-3441-4E7F-8EBB-AD40E64E9F82} - C:\WINDOWS\system32\compatU.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] D:\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Delete Phone Bird Five] C:\Documents and Settings\All Users\Application Data\wave boob delete phone\Ace 32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WinAble] C:\Program Files\WinAble\winable.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] F:\papa\divers\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Tray Trust] C:\DOCUME~1\BOUHMA~1\APPLIC~1\COPYBO~1\SpamLog.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{CFC7B16D-D67F-4D0D-B98D-1018BD116B71}: NameServer = 208.67.222.222 193.55.10.102
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
-
c'est mieux mais pas encore vraiment ça...
télécharge msnfix : http://sosvirus.changelog.fr/MSNFix.zip
Décompresses-le (clic droit >> Extraire ici) et double-clique sur le fichier MSNFix.bat.
Exécute l'option R.
montres le rapport
-
j'ai lancé en executant r mais ca n'a rien donné l'ecran est resté bleu .
-
voila du nouveau j'ai lancé msnfix r, dans le resultat il signale "infection presente " puis je relance le nettoyage voici le rapport
MSNFix 1.623
C:\Documents and Settings\bouhmadouche\Bureau\MSNFix
Fix exécuté le 10/01/2008 - 23:47:40,85 By bouhmadouche
mode normal
************************ Recherche les fichiers présents
Aucun Fichier trouvé
************************ Recherche les dossiers présents
... C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP\
... C:\PROGRA~1\WinAble\
... C:\Temp\
************************ Suppression des fichiers
************************ Suppression des dossiers
.. OK ... C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP\
.. OK ... C:\PROGRA~1\WinAble\
.. OK ... C:\Temp\
************************ Nettoyage du registre
************************ Fichiers suspects
Aucun Fichier trouvé
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 10012008_23560420.zip
------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------
--------------------------------------------- END ---------------------------------------------
-
et voici le rapport d'avg bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.bouhmadouche\Cookies\bouhmadouche@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@himedia.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@shopping.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Cookies\bouhmadouche@2.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Cookies\bouhmadouche@4.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Cookies\bouhmadouche@adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Cookies\bouhmadouche@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Cookies\bouhmadouche@adrevolver[3].txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Cookies\bouhmadouche@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.bouhmadouche\Cookies\bouhmadouche@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.bouhmadouche\Cookies\bouhmadouche@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.bouhmadouche\Cookies\bouhmadouche@adviva[2].txt -> TrackingCookie.Adviva : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.bouhmadouche\Cookies\bouhmadouche@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.bouhmadouche\Cookies\bouhmadouche@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Cookies\bouhmadouche@casalemedia[2].txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Clickbank : Nettoyé.bouhmadouche\Cookies\bouhmadouche@clickbank[1].txt -> TrackingCookie.Clickbank : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.bouhmadouche\Cookies\bouhmadouche@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Cookies\bouhmadouche@dealtime[2].txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Cookies\bouhmadouche@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.bouhmadouche\Cookies\bouhmadouche@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Enhance : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Enhance : Nettoyé.bouhmadouche\Cookies\bouhmadouche@enhance[1].txt -> TrackingCookie.Enhance : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.bouhmadouche\Cookies\bouhmadouche@estat[1].txt -> TrackingCookie.Estat : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.bouhmadouche\Cookies\bouhmadouche@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Gemius : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Gemius : Nettoyé.bouhmadouche\Cookies\bouhmadouche@hit.gemius[2].txt -> TrackingCookie.Gemius : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Goclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Goclick : Nettoyé.bouhmadouche\Cookies\bouhmadouche@goclick[2].txt -> TrackingCookie.Goclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Hitslink : Nettoyé.bouhmadouche\Cookies\bouhmadouche@counter.hitslink[1].txt -> TrackingCookie.Hitslink : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Hotlog : Nettoyé.bouhmadouche\Cookies\bouhmadouche@hotlog[1].txt -> TrackingCookie.Hotlog : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Information : Nettoyé.bouhmadouche\Cookies\bouhmadouche@searchportal.information[1].txt -> TrackingCookie.Information : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.bouhmadouche\Cookies\bouhmadouche@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Nettoyé.bouhmadouche\Cookies\bouhmadouche@www.lop[1].txt -> TrackingCookie.Lop : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.bouhmadouche\Cookies\bouhmadouche@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.bouhmadouche\Cookies\bouhmadouche@overture[1].txt -> TrackingCookie.Overture : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Paycounter : Nettoyé.bouhmadouche\Cookies\bouhmadouche@paycounter[1].txt -> TrackingCookie.Paycounter : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Cookies\bouhmadouche@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.bouhmadouche\Cookies\bouhmadouche@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revenue : Nettoyé.bouhmadouche\Cookies\bouhmadouche@revenue[2].txt -> TrackingCookie.Revenue : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Cookies\bouhmadouche@revsci[2].txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Ru4 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Ru4 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Ru4 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@edge.ru4[1].txt -> TrackingCookie.Ru4 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Cookies\bouhmadouche@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Cookies\bouhmadouche@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.bouhmadouche\Cookies\bouhmadouche@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Starware : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.bouhmadouche\Cookies\bouhmadouche@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.bouhmadouche\Cookies\bouhmadouche@tacoda[1].txt -> TrackingCookie.Tacoda : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.bouhmadouche\Cookies\bouhmadouche@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.bouhmadouche\Cookies\bouhmadouche@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.bouhmadouche\Cookies\bouhmadouche@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.bouhmadouche\Cookies\bouhmadouche@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yadro : Nettoyé.bouhmadouche\Cookies\bouhmadouche@yadro[1].txt -> TrackingCookie.Yadro : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Cookies\bouhmadouche@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Cookies\bouhmadouche@c5.zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Cookies\bouhmadouche@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Mes documents\MSNfake.zip.part/MSNfake/MSN Messenger.exe -> Trojan.FakeMSN.a : Nettoyé et sauvegardé (mise en quarantaine).
-
Bonjour,
ok y avait besoin de faire du menage...
montres un rapport clean puis un nouveau hijackthis
-
salut clownfaced'ange, tu veux dire msnfix
-
salut,
non non, j'ia bien dit clean : http://www.malekal.com/download/clean.zip
décompresse-le sur le bureau (clic droit / extraire tout),
Ouvre le dossier clean qui se trouve sur ton bureau,
et double-clique sur clean.cmd, une fenêtre noire s'affiche, choisis l'option 2 et laisses toi guider.
postes le rapport.
j'dois partir mais j'repasse demain a+ -
re face d'ange
ci joint rapport hijackthis
mais il ya tjrs un fichier qui doit etre infecté systeme32\compatu.dll (avec trojan.bho.agz) avg le reconnait il le met en 40aine mais il est à chaque fois relancé.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:45:46, on 11/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
D:\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
F:\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
F:\papa\divers\Antidote\Gestionnaire Antidote.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
f:\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
D:\bin\iPodService.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\ntos.exe,
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3D08FA5E-3441-4E7F-8EBB-AD40E64E9F82} - C:\WINDOWS\system32\compatU.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: e404 helper - {F10587E9-0E47-4CBE-84AE-7DD20B8684BB} - C:\Program Files\Helper\superfindout.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] D:\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Delete Phone Bird Five] C:\Documents and Settings\All Users\Application Data\wave boob delete phone\Ace 32.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] F:\papa\divers\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Tray Trust] C:\DOCUME~1\BOUHMA~1\APPLIC~1\COPYBO~1\SpamLog.exe
O4 - HKCU\..\Run: [userinit] C:\WINDOWS\system32\ntos.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{CFC7B16D-D67F-4D0D-B98D-1018BD116B71}: NameServer = 208.67.222.222 193.55.10.102
O20 - AppInit_DLLs: C:\WINDOWS\system32\syst1.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - f:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
-
Bonjour,
compte tenu de ton rapport, je te conseille vivement de faire ceci : http://forum.malekal.com/ftopic4192.php
suis le tuto pour le paramétrage, fais un scan et poste le rapport.
-
salut face d'ange;
voci le rapport de antivir(tu jetera un regard stp sur le fichier systeme32\compatu.dll qu'il ne peut pas enlever; il y est dans le rapport
AntiVir PersonalEdition Classic
Report file date: dimanche 13 janvier 2008 21:10
Scanning for 1027920 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: Administrateur
Computer name: FN-7E4DFAA8C9C9
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 19:59:18
ANTIVIR2.VDF : 7.0.1.205 620544 Bytes 08/01/2008 19:59:18
ANTIVIR3.VDF : 7.0.1.227 161280 Bytes 11/01/2008 19:59:18
AVEWIN32.DLL : 7.6.0.46 3084800 Bytes 13/01/2008 19:59:19
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.6.0.2 360488 Bytes 13/01/2008 19:59:19
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: F:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: dimanche 13 janvier 2008 21:10
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
11 processes with 11 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Boot sector 'E:\'
[NOTE] No virus was found!
Boot sector 'F:\'
[NOTE] No virus was found!
Starting to scan the registry.
C:\WINDOWS\system32\ntos.exe
[WARNING] The file could not be opened!
The registry was scanned ( '25' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\ienudwqs.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '47f870c5.qua'!
C:\ldclvlsg.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '47ed70c7.qua'!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\ysxl.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '480270da.qua'!
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\480270da.qua
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '47ba70a4.qua'!
C:\Documents and Settings\bouhmadouche\Application Data\Copy Bolt Type\cash safe stupid test.exe
[DETECTION] Is the Trojan horse TR/Obfusgen.A.5436
[INFO] The file was moved to '47fd70da.qua'!
C:\Documents and Settings\bouhmadouche\Application Data\Copy Bolt Type\lkczmkgu.exe
[DETECTION] Is the Trojan horse TR/Obfusgen.A.5437
[INFO] The file was moved to '47ed70e7.qua'!
C:\Documents and Settings\bouhmadouche\Local Settings\Temp\gos3A.tmp
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
[INFO] The file was moved to '47fd7150.qua'!
C:\Documents and Settings\bouhmadouche\Mes documents\AVG.Anti-Spyware.7.5.0.50-Patch_CiM.rar
[0] Archive type: RAR
--> Avg-Anti-Spyware-v7.5.0.50-patch_CiM.exe
[DETECTION] Is the Trojan horse TR/Generic.4690
[INFO] The file was moved to '47d171e7.qua'!
C:\Documents and Settings\bouhmadouche\Mes documents\license code avg anti spyware 7.5.0.50.exe
[DETECTION] Is the Trojan horse TR/Drop.Agent.cro
[INFO] The file was moved to '47ed7209.qua'!
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\FF0M2KJV\xall[1].htm
[DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
[INFO] The file was moved to '47f6723c.qua'!
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\NXI9YF9U\xall[1].htm
[DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
[INFO] The file was moved to '47f67244.qua'!
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\NXI9YF9U\xall[2].htm
[DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
[INFO] The file was moved to '47f6724d.qua'!
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\NXI9YF9U\xall[3].htm
[DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
[INFO] The file was moved to '47f6724f.qua'!
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\85AJG927\xall[1].htm
[DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
[INFO] The file was moved to '47f67252.qua'!
C:\Program Files\Circle Developement\Uninstall.exe
[DETECTION] Is the Trojan horse TR/Obfusgen.A.5368
[INFO] The file was moved to '47f375dd.qua'!
C:\Program Files\Mozilla Firefox\install.exe~
[DETECTION] Is the Trojan horse TR/Dldr.Small.gmd
[INFO] The file was moved to '47fd780a.qua'!
C:\WINDOWS\system32\compatU.dll
[DETECTION] Is the Trojan horse TR/BHO.agz.14
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\dxdss.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\ntos.exe
[WARNING] The file could not be opened!
C:\WINDOWS\system32\wsnpoem\audio.dll
[WARNING] The file could not be opened!
C:\WINDOWS\system32\wsnpoem\video.dll
[WARNING] The file could not be opened!
C:\WINDOWS\Temp\tmp3B.tmp
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was deleted!
Begin scan in 'D:\' <ELECT INFO2>
End of the scan: dimanche 13 janvier 2008 22:01
Used time: 51:00 min
The scan has been canceled!
2396 Scanning directories
149940 Files were scanned
18 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
1 files were deleted
0 files were repaired
16 files were moved to quarantine
0 files were renamed
6 Files cannot be scanned
149922 Files not concerned
760 Archives were scanned
7 Warnings
0 Notes -
re face d'ange je crois que ca va nettement mieux avec antivir, il resterais eventuellement un autre fichier qui ne veux pas s'effacer(ntos.exe) quand je l'ai envoyé pour analyse (hijacckthis) ; à effacer à tout prix
merci pour tout Face d'ange à+
voici la fin du rapport antivir pour d,e,et f.
AntiVir PersonalEdition Classic
Report file date: lundi 14 janvier 2008 07:55
Scanning for 1027920 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 19:59:18
ANTIVIR2.VDF : 7.0.1.205 620544 Bytes 08/01/2008 19:59:18
ANTIVIR3.VDF : 7.0.1.227 161280 Bytes 11/01/2008 19:59:18
AVEWIN32.DLL : 7.6.0.46 3084800 Bytes 13/01/2008 19:59:19
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.6.0.2 360488 Bytes 13/01/2008 19:59:19
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21
Configuration settings for the scan:
Jobname..........................: Manual Selection
Configuration file...............: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\folder.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: F:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: lundi 14 janvier 2008 07:55
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'wscntfy.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'ServiceLayer.exe' - '1' Module(s) have been scanned
Scan process 'iPodService.exe' - '1' Module(s) have been scanned
Scan process 'ashWebSv.exe' - '1' Module(s) have been scanned
Scan process 'ashMaiSv.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'MPAPI3s.exe' - '1' Module(s) have been scanned
Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
Scan process 'Gestionnaire Antidote.exe' - '1' Module(s) have been scanned
Scan process 'PcSync2.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'LAUNCH~1.EXE' - '1' Module(s) have been scanned
Scan process 'qttask.exe' - '1' Module(s) have been scanned
Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
40 processes with 40 modules were scanned
Start scanning boot sectors:
Boot sector 'D:\'
[NOTE] No virus was found!
Boot sector 'E:\'
[NOTE] No virus was found!
Boot sector 'F:\'
[NOTE] No virus was found!
Starting to scan the registry.
C:\WINDOWS\system32\ntos.exe
[WARNING] The file could not be opened!
The registry was scanned ( '28' files ).
Starting the file scan:
Begin scan in 'D:\' <ELECT INFO2>
D:\System Volume Information\_restore{130D3A65-A3C4-4333-895C-46A5653A1A10}\RP21\A0043211.exe
[DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.DN.2 Backdoor server programs
[INFO] The file was moved to '47bb0805.qua'!
D:\Documents and Settings\Shared\Nokia N70 & N90 Pack 2005 (Java & Symbian Apps, Games & Themes).zip
[0] Archive type: ZIP
--> WR Nokia N70 & N90 Pack/APPLICATIONS/Symbian/ProfiMail 2.32 + keygen/ProfiMail_kg.exe
[DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
[INFO] The file was moved to '47f60a02.qua'!
D:\Documents and Settings\ \Shared\livre bricolage enfants - 1000 activités pour petites mains.zip
[0] Archive type: ZIP
--> Setup.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
D:\bpsvg.exe
[DETECTION] Is the Trojan horse TR/Agent.2852597
[INFO] The file was deleted!
D:\flvplayer.zip
[0] Archive type: ZIP
--> Setup.exe
[DETECTION] Is the Trojan horse TR/Agent.1877775
[INFO] The file was deleted!
Begin scan in 'E:\' <ELECT INFO3>
Begin scan in 'F:\'
End of the scan: lundi 14 janvier 2008 08:58
Used time: 1:03:03 min
The scan has been done completely.
1033 Scanning directories
215067 Files were scanned
5 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
3 files were deleted
0 files were repaired
2 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
215062 Files not concerned
1484 Archives were scanned
1 Warnings
7 Notes -
Bonsoir,
tu vas encore refaire un scan avec antivir, et tu vas suivre le tuto pour qu'il cherche egalement les rootkits
la je vois : Search for rootkits..............: off
tu vas aller sur https://www.virustotal.com/gui/
et tu envoies le fichier : C:\WINDOWS\system32\ntos.exe
s'il est infecté tu le supprimes manuellement de ton pc
(si tu n'y arrive pas, redémarre en mode sans echec pour le faire)
après tout ça, j'veux bien voir ton hijackthis...
-
salut face d'ange excuse pour le retard, j'ai attrapé un virus mais cette fois c'est la grippe, donc j'ai donné tout ce que tu m'as dis à un ami et il n'ya bplus aucun problème sur le micro il est clean rt en plus il roule rapidement.
merci pour tout et à bientôt surccm
CIAO FACE D'ANGE -
salut,
cool, pour celui de la grippe je ne peux rien faire pour toi....
