Fenetres internet s'ovrent seule + Log Hi Jak Fermé

Question

Bonjour,
Je fais appel à vous concernant un probleme de fenetres intepestives qui s'excutent sur mon pc
J'ai scanné avec Win Defender, Spybot, Qui mecorrge des problemes mais pas celui ci 
Je suis aussi oblige d'appuyer pluier fois sur certaines touches du clavier pour que la lettre soit marquee (exemple  e ou t ou g
Je vous joins le log Hi Jack This en esprant votre aide...Je vous remercie.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:36:57, on 25/01/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Windows\System32undll32.exe
C:\Windows\System32undll32.exe
C:\Windows\mrofinu2000351.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Users\Lexxcoop\AppData\Roaming\WinTouch\WinTouch.exe
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windowsayiou.exe
C:\Windows\System32undll32.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Lexxcoop\Desktop\lexxcoop1-37561879-c.exe
C:\Windows\system32\conime.exe
C:\Users\Lexxcoop\AppData\Local\Temp\par-Lexxcoop\cache-1ce0c979f952a9bc4542418936f635566d7e4243\lexxcoop1-37561879-c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9d.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fnhotmail%2fhelp%2f%3f
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\gebbcyv.dll,#1
O4 - HKLM\..\Run: [runner1] C:\Windows\mrofinu2000351.exe 61A847B5BBF72810329B385577F801F0B3E35B6638993F4661AA4EBD86D67C56389B284534F310
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [WinTouch] C:\Users\Lexxcoop\AppData\Roaming\WinTouch\WinTouch.exe
O4 - HKCU\..\Run: [SfKg6w] C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windowsayiou.exe
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\Lexxcoop\AppData\Local\Temp\awvtr.dll,c
O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\Lexxcoop\AppData\Local\Temp\ssttr.dll,#1
O4 - HKCU\..\Run: [7cdc21a6] rundll32.exe "C:\Users\Lexxcoop\AppData\Local\Temp\wxrapjgy.dll",b
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: OFFICE One Startup v7.lnk = ?
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix: 
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: MySql - Unknown owner - C:\mysql\bin\mysqld-nt.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Transcoding and Broadcast Service (Transcode360) - Unknown owner - C:\Program Files\Transcode360\Transcode360.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.6\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.45\bin\mysqld-nt.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

jfkpresident · Answer

salut alex,

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection): 

- Va dans démarrer puis panneau de configuration 
- Double Clique sur l'icône "Comptes d'utilisateurs" 
- Clique ensuite sur désactiver et valide. 

Télécharge maintenant Navilog1 depuis-ce lien : 

http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 

Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 
Ensuite double clique sur navilog1.exe pour lancer l'installation. 
Une fois l'installation terminée, Fais un Clic-droit sur le raccourci Navilog1 présent sur ton bureau et choisis "Exécuter 

en tant qu'administrateur". 

Au menu principal, Fais le choix 1 
Laisse toi guider et patiente. 
Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche le blocnote va s'ouvrir. 
Copie-colle l'intégralité du rapport dans une réponse. 
Referme le blocnote 
Le rapport fixnavi.txt est en outre sauvegardé dans %systemdrive%.

Alex · Answer

Mrci beaucoup de cette reponse rapide JFK
Voici le second raport de mon scan
Search Navipromo version 3.4.2 commencé le 25/01/2008 à 17:07:40,91

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 21.01.2008 à 14h00 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6000 
Internet Explorer : 7.0.6000.16575 
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\Windows ***



*** Recherche dossiers dans C:\Program Files ***


*** Recherche dossiers dans C:\ProgramData ***


*** Recherche dossiers dans C:\ProgramData\Microsoft\Windows\Start Menu\Programs ***


*** Recherche dossiers dans C:\Users\Lexxcoop\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs ***


*** Recherche dossiers dans C:\Users\Lexxcoop\AppData\Local\virtualstore\Program Files ***



*** Recherche dossiers dans C:\Users\Lexxcoop\AppData\Roaming ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\Windows\system32 *

* Recherche dans C:\Users\Lexxcoop\AppData\Local\Microsoft *

* Recherche dans C:\Users\Lexxcoop\AppData\Local\virtualstore\windows\system32 *

* Recherche dans C:\Users\Lexxcoop\AppData\Local *



*** Recherche fichiers *** 




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans C:\Windows\system32 :


* Dans C:\Users\Lexxcoop\AppData\Local\Microsoft :


* Dans C:\Users\Lexxcoop\AppData\Local\virtualstore\windows\system32 :


* Dans C:\Users\Lexxcoop\AppData\Local :


3)Recherche Certificats :

Certificat Egroup absent !

4)Recherche fichiers connus :



*** Analyse terminée le 25/01/2008 à 17:30:58,47 ***

Merci

jfkpresident · Answer

as tu bien désactivé l'UAC avant de faire le scan navilog ??

Alex · Answer

Oui  je l'ai bien desactivé j'ai refait la manipulation ou cette fois ci ca réactiverait les comptes!

jfkpresident · Answer

je viens de voir que tu n'as pas d'antivirus!!

prend celui ci:https://www.malekal.com/avira-free-security-antivirus-gratuit/#mozTocId71944 

tu vas télécharger AVG anti-spyware:télécharge AVG anti-spyware ici:http://free.grisoft.com/doc/download-free-anti-spyware/us/frt/0     (tu prend la version free) 
tutoriel d'utilisation:http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html 

quand je te le dirais tu feras un scan complet avec avg et tu posteras le rapport généré.(pour l'instant enregistres le sur ton bureau)

télécharge aussi ccleaner:Nettoyeurs (de fichiers inutiles) et autres :

*Ccleaner (gratuit)
Téléchargement :
https://www.01net.com/
Tuto :
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

Lors de l’installation, [décoche] l’option qui t’installerait la barre Yahoo !

idem pour ccleaner quand je te le dirai tu le passeras.

Alex · Answer

C'est ce c.. de hotliner livebox qui m'a dit suit a un probleme qu'ayant windows vista, je n'avaispas besoin d'av, pensant a un systeme fiable comme Os (LOL)
Je suis les informatons et poste mon rapport 
Merci

Alex · Answer

C'est bonles 2 logiciels sont installés, sans barre yahoo.

jfkpresident · Answer

bon maintenant on va passer a la desinfection armes lourdes  

télécharge combofix ici:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe     
* Démarrer en mode sans echec 
* Double cliquer combofix.exe. 
* Appuyer sur la touche Y (Yes) pour démarrer le scan 
* Le rapport sera crée dans: C:\Combofix.txt, poste le stp 

ensuite:

E - Scan online avec BitDefender 

Fais ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X; 

la barre anti-popup du SP2 (en haut) va se mettre à clignoter, 
clic dessus et choisis "accepter l'active X" pour faire fonctionner le scan anti-virus. 
Une fois qu'il a terminé colle le rapport ici stp 
https://www.bitdefender.com/toolbox/ 
Copie/Colle le rapport 
http://www.malekal.com/tutorial_BitDefender_AntiSpyware.php 
https://kerio.probb.fr/ 
http://pageperso.aol.fr/rginformatique/mapage/defender.htm 

bon courage !!

Alex · Answer

Voici le premier rapport combofix ComboFix 08-01-23.1C - Lexxcoop 2008-01-25 18:07:53.1 - NTFSx86 Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.93 [GMT 1:00] Endroit: C:\Users\Lexxcoop\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\78ULMIF1\ComboFix[1].exe * Création d'un nouveau point de restauration . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat C:\Users\Lexxcoop\AppData\Roaming\macromedia\Flash Player\#SharedObjects\7L7LV4HJ\www.broadcaster.com C:\Users\Lexxcoop\AppData\Roaming\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com C:\Users\Lexxcoop\AppData\Roaming\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com\settings.sol C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outerinfo C:\Users\Lexxcoop\AppData\Roaming\WinTouch\wintouch.cfg C:\Users\Lexxcoop\AppData\Roaming\WinTouch\WinTouch.exe C:\Users\Lexxcoop\AppData\Roaming\WinTouch\WTUninstaller.exe C:\Users\Lexxcoop\Documents\WNSXS~1 C:\Users\Lexxcoop\Documents\WNSXS~1\W?nSxS\ C:\Windows\b138.exe C:\Windows\mrofinu2000351.exe C:\Windows\system32\cbxwvvv.dll C:\Windows\system32\gebbcyv.dll C:\Windows\system32\khffgge.dll C:\Windows\system32\stem32~1 ----- BITS: Possible sites infect‚s ----- hxxp://epg.tvdownload.microsoft.com . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-12-25 to 2008-01-25 )))))))))))))))))))))))))))))))))))) . 2008-01-25 18:04 . 2000-08-31 08:00 51,200 --a------ C:\Windows\Nircmd.exe 2008-01-25 18:00 . 2007-05-30 13:10 10,872 --a------ C:\Windows\System32\drivers\AvgAsCln.sys 2008-01-25 17:57 . 2008-01-25 17:57 d-------- C:\Program Files\CCleaner 2008-01-25 17:05 . 2008-01-25 17:33 d-------- C:\Program Files\Navilog1 2008-01-25 16:36 . 2008-01-25 16:36 d-------- C:\Program Files\Trend Micro 2008-01-24 20:03 . 2008-01-24 20:03 50,059 --a------ C:\Program Files\update.zip 2008-01-24 17:34 . 2008-01-24 17:34 54,156 --ah----- C:\Windows\QTFont.qfn 2008-01-24 17:34 . 2008-01-24 17:34 1,409 --a------ C:\Windows\QTFont.for 2008-01-24 00:00 . 2008-01-24 00:02 36,864 --a------ C:\Windows\mrofinu2000351.exe.tmp 2008-01-21 17:25 . 2008-01-21 17:25 d-------- C:\Program Files\TuneUp Utilities 2008 2008-01-21 17:25 . 2008-01-21 17:25 306,432 --a------ C:\Windows\System32\TuneUpDefragService.exe 2008-01-21 17:25 . 2007-12-20 10:41 29,440 --a------ C:\Windows\System32\uxtuneup.dll 2008-01-21 17:25 . 2007-12-20 10:44 16,640 --a------ C:\Windows\System32\authuitu.dll 2008-01-21 17:24 . 2008-01-21 19:36 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-01-19 16:49 . 2008-01-23 23:05 d-------- C:\Program Files\K!TV 2008-01-12 16:15 . 2008-01-12 16:24 d-------- C:\Program Files\TVAnts 2008-01-10 03:06 . 2008-01-10 03:06 802,816 --a------ C:\Windows\System32\drivers cpip.sys 2008-01-10 03:06 . 2008-01-10 03:06 216,760 --a------ C:\Windows\System32\drivers etio.sys 2008-01-10 03:06 . 2008-01-10 03:06 167,424 --a------ C:\Windows\System32 cpipcfg.dll 2008-01-10 03:06 . 2008-01-10 03:06 24,064 --a------ C:\Windows\System32 etcfg.exe 2008-01-10 03:06 . 2008-01-10 03:06 22,016 --a------ C:\Windows\System32 etiougc.exe 2008-01-10 03:03 . 2008-01-10 03:03 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll 2008-01-10 03:03 . 2008-01-10 03:03 1,686,016 --a------ C:\Windows\System32\gameux.dll 2008-01-10 03:03 . 2008-01-10 03:03 1,060,920 --a------ C:\Windows\System32\drivers tfs.sys 2008-01-10 03:03 . 2008-01-10 03:03 211,000 --a------ C:\Windows\System32\drivers\volsnap.sys 2008-01-10 03:03 . 2008-01-10 03:03 154,624 --a------ C:\Windows\System32\drivers wifi.sys 2008-01-10 03:03 . 2008-01-10 03:03 109,624 --a------ C:\Windows\System32\drivers\ataport.sys 2008-01-10 03:03 . 2008-01-10 03:03 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys 2008-01-10 03:03 . 2008-01-10 03:03 21,560 --a------ C:\Windows\System32\drivers\atapi.sys 2008-01-10 03:03 . 2008-01-10 03:03 20,024 --a------ C:\Windows\System32\drivers\viaide.sys 2008-01-10 03:02 . 2008-01-10 03:02 11,776 --a------ C:\Windows\System32\sbunattend.exe 2008-01-09 20:56 . 2008-01-09 20:57 d-------- C:\wamp . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-25 17:18 --------- d-----w C:\Program Files\Transcode360 2008-01-10 06:28 --------- d-----w C:\Program Files\Windows Sidebar 2008-01-10 06:28 --------- d-----w C:\Program Files\Windows Mail 2008-01-10 02:03 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll 2008-01-10 02:03 449,024 ----a-w C:\Windows\AppPatch\AcSpecfc.dll 2008-01-10 02:03 2,143,744 ----a-w C:\Windows\AppPatch\AcGenral.dll 2008-01-10 02:03 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll 2008-01-03 18:04 --------- d-----w C:\Program Files\Common Files\LogiShrd 2007-12-24 22:32 --------- d-----w C:\Program Files\Logitech 2007-12-23 14:21 --------- d-----w C:\Program Files\Macrogaming 2007-12-22 18:53 81,920 ----a-w C:\Windows\System32\W32N50.dll 2007-12-22 18:53 17,134 ----a-w C:\Windows\System32\PCANDIS5.sys 2007-12-18 23:32 --------- d-----w C:\Program Files\Messenger Plus! Live 2007-12-18 23:17 --------- d-----w C:\Program Files\Windows Live 2007-12-18 23:11 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller 2007-12-17 19:22 --------- d-----w C:\Program Files\Norton Security Scan 2007-12-16 03:15 1,049,643 ----a-w C:\Windows\Prison Tycoon 3 Uninstaller.exe 2007-12-16 03:09 --------- d-----w C:\Program Files\ValuSoft 2007-12-16 03:09 --------- d-----w C:\Program Files\Common Files\Thraex Software 2007-12-16 03:07 --------- d-----w C:\Program Files\DAEMON Tools 2007-12-16 02:59 685,816 ----a-w C:\Windows\system32\drivers\sptd.sys 2007-12-16 02:58 --------- d-----w C:\Program Files\MagicISO 2007-12-12 02:06 1,327,104 ----a-w C:\Windows\System32\quartz.dll 2007-12-12 02:05 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL 2007-12-12 02:05 223,232 ----a-w C:\Windows\System32\WMASF.DLL 2007-12-12 02:04 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys 2007-12-12 02:04 824,832 ----a-w C:\Windows\System32\wininet.dll 2007-12-12 02:04 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys 2007-12-12 02:04 56,320 ----a-w C:\Windows\System32\iesetup.dll 2007-12-12 02:04 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll 2007-12-12 02:04 26,624 ----a-w C:\Windows\System32\ieUnatt.exe 2007-12-12 02:04 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys 2007-12-12 02:04 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys 2007-12-12 02:02 3,504,824 ----a-w C:\Windows\System32 tkrnlpa.exe 2007-12-12 02:02 3,470,520 ----a-w C:\Windows\System32 toskrnl.exe 2007-12-03 08:51 --------- d-----w C:\Program Files\SecondLife 2007-11-29 17:07 --------- d-----w C:\Program Files\FriendBlasterPro 2007-11-18 02:02 1,244,672 ----a-w C:\Windows\System32\mcmde.dll 2007-11-15 02:17 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr 2007-11-15 02:17 67,584 ----a-w C:\Windows\System32\wlanhlp.dll 2007-11-15 02:17 542,720 ----a-w C:\Windows\System32\sysmain.dll 2007-11-15 02:17 502,784 ----a-w C:\Windows\System32\wlansvc.dll 2007-11-15 02:17 47,104 ----a-w C:\Windows\System32\wlanapi.dll 2007-11-15 02:17 297,984 ----a-w C:\Windows\System32\wlansec.dll 2007-11-15 02:17 290,816 ----a-w C:\Windows\System32\wlanmsm.dll 2007-11-15 02:17 24,064 ----a-w C:\Windows\System32\wtsapi32.dll 2007-11-15 02:17 2,923,520 ----a-w C:\Windows\explorer.exe 2007-11-15 02:17 2,027,008 ----a-w C:\Windows\System32\win32k.sys 2007-11-15 02:11 8,704 ----a-w C:\Windows\System32\hcrstco.dll 2007-11-15 02:11 8,704 ----a-w C:\Windows\System32\hccoin.dll 2007-10-31 12:03 245,408 ----a-w C:\Windows\System32\unicows.dll 2007-08-31 04:03 174 --sha-w C:\Program Files\desktop.ini 2007-04-01 21:43 278,528 ----a-w C:\Program Files\Common Files\FDEUnInstaller.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-10 03:02 1232896] "WindowsWelcomeCenter"="oobefldr.dll" [2006-11-02 13:34 2159104 C:\Windows\System32\oobefldr.dll] "SmpcSys"="C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe" [2006-10-23 15:49 1092152] "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 13:35 125440] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-02 16:27 68856] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 13:36 201728] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ OFFICE One Startup v7.lnk - C:\Program Files\OFFICE One v7\OFFICE One Startup v7\oostartupv7.exe [2007-01-05 09:01:03 713728] Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2007-03-24 01:08:53 124912] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableLUA"= 0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion un-] "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 "Shareaza"="C:\Program Files\Shareaza\Shareaza.exe" -tray [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un-] "HostManager"=C:\Program Files\Common Files\AOL\1167982694\ee\AOLSoftware.exe "WinampAgent"=C:\Program Files\Winamp\winampa.exe R2 UxTuneUp;TuneUp Extension de thème;C:\Windows\System32\svchost.exe [2006-11-02 10:45] R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service;C:\Windows\system32\DRIVERS\fetnd5bv.sys [2007-09-21 11:24] R3 Ph3xIB32;Philips 713x Inbox PCI TV Card;C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 09:43] R3 X10Hid;X10 Hid Device;C:\Windows\system32\Drivers\x10hid.sys [2006-11-17 10:31] S2 ELOADER;General Purpose USB Driver (adildr.sys);C:\Windows\system32\Drivers\adildr.sys [2007-01-10 16:56] S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique;"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" [] S3 3xHybrid;ASUSTek SAA713x PCI Card;C:\Windows\system32\DRIVERS\3xHybrid.sys [2006-11-15 04:13] S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;C:\Windows\system32\DRIVERS\sis163u.sys [2006-12-20 10:18] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\Windows\System32\TuneUpDefragService.exe [2008-01-21 17:25] S3 UMPass;Pilote Microsoft UMPass;C:\Windows\system32\DRIVERS\umpass.sys [2006-11-02 09:55] S3 wampapache;wampapache;"c:\wamp\bin\apache\apache2.2.6\bin\httpd.exe" [2007-09-05 08:59] S3 wampmysqld;wampmysqld;c:\wamp\bin\mysql\mysql5.0.45\bin\mysqld-nt.exe wampmysqld [] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalSystemNetworkRestricted REG_MULTI_SZ hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp *Newly Created Service* - AVGASCLN . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-01-25 16:30:55 C:\Windows\Tasks\1-Click Maintenance.job" - C:\Program Files\TuneUp Utilities 2008\OneClick.exe "2008-01-24 19:02:53 C:\Windows\Tasks\At1.job" - C:\Users\Lexxcoop\AppData\Roaming\wunauclt.exe "2008-01-23 23:49:08 C:\Windows\Tasks\At2.job" - C:\Users\Lexxcoop\AppData\Roaming\wunauclt.exe "2008-01-23 23:49:09 C:\Windows\Tasks\At3.job" - C:\Users\Lexxcoop\AppData\Roaming\wunauclt.exe "2008-01-23 23:49:09 C:\Windows\Tasks\At4.job" - C:\Users\Lexxcoop\AppData\Roaming\wunauclt.exe "2008-01-24 19:02:53 C:\Windows\Tasks\At5.job" - C:\Users\Lexxcoop\AppData\Roaming\wunauclt.exe "2008-01-23 23:49:09 C:\Windows\Tasks\At6.job" - C:\Users\Lexxcoop\AppData\Roaming\wunauclt.exe "2008-01-25 17:16:00 C:\Windows\Tasks\At7.job" - C:\Windows\system32\cmd.exe "2008-01-25 17:00:04 C:\Windows\Tasks\Extension de garantie.job" - C:\Program Files\Packard Bell\SetupmyPC\PBCarNot.exe "2008-01-24 23:29:35 C:\Windows\Tasks\User_Feed_Synchronization-{E737046C-CB6E-4CC0-A4AD-AC719979C670}.job" - C:\Windows\system32\msfeedssync.exe . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-25 18:18:54 Windows 6.0.6000 NTFS Balayage processus cach‚s ... Balayage cach‚ autostart entries ... Balayage des fichiers cach‚s ... Scan termin‚ avec succŠs Les fichiers cach‚s: 0 ************************************************************************** . Temps d'accomplissement: 2008-01-25 18:23:23 - machine was rebooted ComboFix-quarantined-files.txt 2008-01-25 17:23:17 . 2008-01-24 21:08:55 --- E O F --- Je passe à la phase 2, scan bitdefender

jfkpresident · Answer

ok ce sera peut etre un peu plus long.......ne t'inquiete pas !

Alex · Answer

Oui en effet il semble que ca dure plusieurs heures !
Depuis le redemmarrage de comboxif, je peux d'ores et déjà retaper normalement!
C'est sur la bonne voie :D

jfkpresident · Answer

C'est sur la bonne voie :D>>>t'inquiete on va le desinfecter ton pc !!

je dois partir je te donnerais la suite demain
bonne nuit .

Alex · Answer

Aucun soucis, Voici en attendant Le second Rapport Bit defender

  
  
 
Statistics
 
Time
 01:47:38
 
Files
 330613
 
Folders
 15575
 
Boot Sectors
 3
 
Archives
 3370
 
Packed Files
 14121
 
  
  
 
Results
 
Identified Viruses 
 7
 
Infected Files 
 12
 
Suspect Files 
 0
 
Warnings
 0
 
Disinfected
 0
 
Deleted Files
 12
 
  
  
 
Engines Info
 
Virus Definitions
 977136
 
Engine build
 AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
 
Scan plugins
 16
 
Archive plugins
 41
 
Unpack plugins
 7
 
E-mail plugins
 6
 
System plugins
 5
 
  
  
 
Scan Settings
 
First Action
 Disinfect
 
Second Action
 Delete
 
Heuristics
 Yes
 
Enable Warnings
 Yes
 
Scanned Extensions
 *;
 
Exclude Extensions
  
 
Scan Emails
 Yes
 
Scan Archives
 Yes
 
Scan Packed
 Yes
 
Scan Files
 Yes
 
Scan Boot
 Yes
 
  
  
 
  Scanned File
  Status
 
C:\Program Files\update.zip=>update1.exe
 Infected with: Backdoor.Sdbot.DFEO
 
C:\Program Files\update.zip=>update1.exe
 Deleted
 
C:\Program Files\update.zip
 Updated
 
C:\Program Files\update.zip=>update2.exe
 Infected with: Trojan.Vundo.DWH
 
C:\Program Files\update.zip=>update2.exe
 Deleted
 
C:\Program Files\update.zip
 Updated
 
C:\QooBox\Quarantine\C\Users\Lexxcoop\AppData\Roaming\WinTouch.vir\WinTouch.exe
 Detected with: Adware.Wintouch.A
 
C:\QooBox\Quarantine\C\Users\Lexxcoop\AppData\Roaming\WinTouch.vir\WinTouch.exe
 Deleted
 
C:\QooBox\Quarantine\C\Windows\b138.exe.vir
 Infected with: Trojan.Downloader.Agent.BHU
 
C:\QooBox\Quarantine\C\Windows\b138.exe.vir
 Deleted
 
C:\QooBox\Quarantine\C\Windows\System32\cbxwvvv.dll.vir
 Infected with: Trojan.Vundo.DWH
 
C:\QooBox\Quarantine\C\Windows\System32\cbxwvvv.dll.vir
 Deleted
 
C:\QooBox\Quarantine\C\Windows\System32\gebbcyv.dll.vir
 Infected with: Trojan.Vundo.DWH
 
C:\QooBox\Quarantine\C\Windows\System32\gebbcyv.dll.vir
 Deleted
 
C:\QooBox\Quarantine\C\Windows\System32\khffgge.dll.vir
 Infected with: Trojan.Vundo.DWH
 
C:\QooBox\Quarantine\C\Windows\System32\khffgge.dll.vir
 Deleted
 
C:\QooBox\Quarantine\catchme2008-01-25_181841.89.zip=>WinTouch.exe
 Detected with: Adware.Wintouch.A
 
C:\QooBox\Quarantine\catchme2008-01-25_181841.89.zip=>WinTouch.exe
 Deleted
 
C:\QooBox\Quarantine\catchme2008-01-25_181841.89.zip
 Updated
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277=>BnnnnBaa.class
 Infected with: Java.Trojan.Exploit.Bytverify
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277=>BnnnnBaa.class
 Disinfection failed
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277=>BnnnnBaa.class
 Deleted
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277
 Updated
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277=>VaannnaaBaa.class
 Infected with: Trojan.Java.Classloader.E
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277=>VaannnaaBaa.class
 Deleted
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277
 Updated
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277=>Dnnny.class
 Infected with: Java.Trojan.Exploit.Bytverify
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277=>Dnnny.class
 Disinfection failed
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277=>Dnnny.class
 Deleted
 
C:\Users\Lexxcoop\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\9180419-74a9c277
 Updated
 
C:\Users\Lexxcoop\Documents\Downloads\Flash Fxp V 3.4 Crack&Serial.rar=>Crack\flashfxp.3.4.0.build.1145-patch.exe
 Infected with: Trojan.Patch.F
 
C:\Users\Lexxcoop\Documents\Downloads\Flash Fxp V 3.4 Crack&Serial.rar=>Crack\flashfxp.3.4.0.build.1145-patch.exe
 Deleted
 
C:\Users\Lexxcoop\Documents\Downloads\Flash Fxp V 3.4 Crack&Serial.rar
 Update failed

jfkpresident · Answer

re,
les fichiers infectés ont été supprimés .

maintenant tu vas passer AVG anti-spywares(tu me post le rapport)
et tu passe ccleaner>>>je te rappelle que tu as les tutoriels post 5
tu garderas ces deux logiciels sur ton pc et tu les utiliseras au moins une fois par semaines ainsi qu'un  scan complet avec antivir.

une fois fait ca tu me reposte un nouveau log hijackthis.

Alex · Answer

Merci 
je m etais absente pour le week end également, Je poste mmon rapport

Alex · Answer

Rapport avg spyware 



---------------------------------------------------------

 + Créé à:	19:22:58 28/01/2008

 + Résultat de l'analyse:	



:mozilla.8:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.9:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@247realmedia[2].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@247realmedia[1].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.10:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.11:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.12:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.13:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.14:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.15:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.270:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.308:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.62:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.94:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@112.2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@avl.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@bet.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@brightcove.112.2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@gettyimages.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@hotelscom.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@karavel.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@metacafe.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@micromania.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@mistergooddeal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@msnportalintlbeetoffice2007.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@nielsen.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@privateoutlet.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@riptownmedia.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@shopping.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@viamtvcom.112.2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@voyagescarrefour.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.20:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.21:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.22:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.438:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.53:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.54:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@1.adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@3.adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@4.adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\system@adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\system@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.51:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Adengage : Aucune action entreprise.
:mozilla.52:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Adengage : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@adrevolver[1].txt -> TrackingCookie.Adrevolver : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Aucune action entreprise.
:mozilla.28:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.29:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@adtech[2].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@adtech[2].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\system@adtech[1].txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.34:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.35:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.36:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.37:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.38:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.42:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.43:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.44:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.46:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.45:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@bluestreak[2].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@iv2.bluestreak[1].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@bluestreak[1].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@citi.bridgetrack[1].txt -> TrackingCookie.Bridgetrack : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@burstnet[2].txt -> TrackingCookie.Burstnet : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@casalemedia[2].txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@casinotropez[2].txt -> TrackingCookie.Casinotropez : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@clickbank[1].txt -> TrackingCookie.Clickbank : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@dealtime[1].txt -> TrackingCookie.Dealtime : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Aucune action entreprise.
:mozilla.56:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@doubleclick[2].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@doubleclick[2].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@e-2dj6wgl4gkajkdo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@e-2dj6whmywoc5oeo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@e-2dj6wjkoqkcjiao.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@e-2dj6wjliopazcfp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@e-2dj6wjnyulazehp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Aucune action entreprise.
:mozilla.152:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@estat[2].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\system@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
:mozilla.23:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Euroclick : Aucune action entreprise.
:mozilla.24:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Euroclick : Aucune action entreprise.
:mozilla.25:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Euroclick : Aucune action entreprise.
:mozilla.26:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Euroclick : Aucune action entreprise.
:mozilla.505:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Euroclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@fastclick[1].txt -> TrackingCookie.Fastclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@fastclick[2].txt -> TrackingCookie.Fastclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@findwhat[1].txt -> TrackingCookie.Findwhat : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@hit.gemius[1].txt -> TrackingCookie.Gemius : Aucune action entreprise.
:mozilla.588:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
:mozilla.589:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ehg-ads.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ehg-citenumerique.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ehg-drjays.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ehg-foxsports.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ehg-globalgamingleague.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ehg-ioffer.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ehg-kasperskylab.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ehg-myspaceinc.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ehg-publiciswest.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@ehg-bestbuy.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@ehg-groupernetworks.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@ehg-youtube.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@counter.hitslink[1].txt -> TrackingCookie.Hitslink : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@counter.hitslink[1].txt -> TrackingCookie.Hitslink : Aucune action entreprise.
:mozilla.208:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Imrworldwide : Aucune action entreprise.
:mozilla.209:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Imrworldwide : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@searchportal.information[2].txt -> TrackingCookie.Information : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@intelli-direct[1].txt -> TrackingCookie.Intelli-direct : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ivwbox[2].txt -> TrackingCookie.Ivwbox : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@server.lon.liveperson[3].txt -> TrackingCookie.Liveperson : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Aucune action entreprise.
:mozilla.303:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.315:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@overture[2].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@perf.overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@perf.overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@pro-market[2].txt -> TrackingCookie.Pro-market : Aucune action entreprise.
:mozilla.338:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
:mozilla.339:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@questionmarket[2].txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@questionmarket[1].txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
:mozilla.359:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Realmedia : Aucune action entreprise.
:mozilla.360:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Realmedia : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@realmedia[2].txt -> TrackingCookie.Realmedia : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@realmedia[1].txt -> TrackingCookie.Realmedia : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@revenue[2].txt -> TrackingCookie.Revenue : Aucune action entreprise.
:mozilla.362:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Revsci : Aucune action entreprise.
:mozilla.363:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Revsci : Aucune action entreprise.
:mozilla.364:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Revsci : Aucune action entreprise.
:mozilla.365:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Revsci : Aucune action entreprise.
:mozilla.366:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Revsci : Aucune action entreprise.
:mozilla.367:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Revsci : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@revsci[1].txt -> TrackingCookie.Revsci : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@edge.ru4[2].txt -> TrackingCookie.Ru4 : Aucune action entreprise.
:mozilla.36:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.37:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.38:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.39:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.407:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.408:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.409:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.40:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.410:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.411:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.412:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.41:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.45:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.63:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\system@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\system@serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@skype[1].txt -> TrackingCookie.Skype : Aucune action entreprise.
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\system@skype[2].txt -> TrackingCookie.Skype : Aucune action entreprise.
:mozilla.425:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.426:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.427:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.615:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.616:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.617:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\system@smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@spylog[2].txt -> TrackingCookie.Spylog : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@statcounter[1].txt -> TrackingCookie.Statcounter : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@statcounter[2].txt -> TrackingCookie.Statcounter : Aucune action entreprise.
:mozilla.442:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise.
:mozilla.443:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise.
:mozilla.444:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@tacoda[2].txt -> TrackingCookie.Tacoda : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@tacoda[1].txt -> TrackingCookie.Tacoda : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@trafficmp[2].txt -> TrackingCookie.Trafficmp : Aucune action entreprise.
:mozilla.457:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\system@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@valueclick[2].txt -> TrackingCookie.Valueclick : Aucune action entreprise.
:mozilla.475:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.476:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.477:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@weborama[1].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\system@weborama[1].txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.540:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Webtrends : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@m.webtrends[2].txt -> TrackingCookie.Webtrends : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@yadro[1].txt -> TrackingCookie.Yadro : Aucune action entreprise.
:mozilla.17:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.18:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.20:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.21:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.22:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.23:C:\Users\Lexxcoop\AppData\Roaming\SecondLife\browser_profile\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.496:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.497:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.498:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.499:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.500:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.501:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.502:C:\Users\Lexxcoop\AppData\Roaming\Mozilla\Firefox\Profiles\upusp6k3.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@zedo[2].txt -> TrackingCookie.Zedo : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@zedo[2].txt -> TrackingCookie.Zedo : Aucune action entreprise.
C:\Users\Lexxcoop\Documents\Progz drivers\crack.rar/crack,serial.exe -> Trojan.Obfuscated.fk : Aucune action entreprise.


Fin du rapport

jfkpresident · Answer

re,
aucunes actions entreprises>>>supprimes tout !!

et dis moi surtout si celui la a été supprimé:Trojan.Obfuscated.fk

Alex · Answer

Le second lOG hIJACK THIS 
et encore merci pour votre aide rapide !!!





Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:32:34, on 28/01/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Windows\system32\conime.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fnhotmail%2fhelp%2f%3f
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: OFFICE One Startup v7.lnk = ?
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O13 - Gopher Prefix: 
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: MySql - Unknown owner - C:\mysql\bin\mysqld-nt.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Transcoding and Broadcast Service (Transcode360) - Unknown owner - C:\Program Files\Transcode360\Transcode360.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.6\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.45\bin\mysqld-nt.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Alex · Answer

Il a ete supprime m'a propose de mettre en quarantaine toute l'archive; J'ai fait oui !

jfkpresident · Answer

supprimes tout si tu peux et dit moi si ce trojan a été suppprimé:Trojan.Obfuscated.fk ou mis en quarantaine ??

Alex · Answer

Il a ete mis en quarantaine a mon avis, je relance un scan avg pour confirmer

jfkpresident · Answer

poste moi le rapport AVG pour vérifier ;merci

Alex · Answer

Il ne semble plus y etre Voici le second scan 



G Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	15:49:17 29/01/2008

 + Résultat de l'analyse:	



C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@adtech[1].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@advertising[1].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@bluestreak[2].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@bluestreak[1].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@fastclick[1].txt -> TrackingCookie.Fastclick : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@realmedia[2].txt -> TrackingCookie.Realmedia : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@statcounter[1].txt -> TrackingCookie.Statcounter : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@statcounter[1].txt -> TrackingCookie.Statcounter : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@weborama[1].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@weborama[1].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\Low\lexxcoop@zedo[2].txt -> TrackingCookie.Zedo : Aucune action entreprise.
C:\Users\Lexxcoop\AppData\Roaming\Microsoft\Windows\Cookies\lexxcoop@zedo[1].txt -> TrackingCookie.Zedo : Aucune action entreprise.


Fin du rapport

jfkpresident · Answer

bon on dirait qu'on a fini !

dernier conseil:--Essaye le navigateur Firefox plus sur/sécurisé qu IE 

-Téléchargement: http://www.mozilla-europe.org/fr/products/firefox/ 
-Tutorial pour le sécuriser: https://forum.zebulon.fr/topic/69628-s%C3%A9curiser-un-peu-plus-firefox/ 

garde explorer pour les mise a jour et les scan en ligne.

voila @ jamais ++

Alex · Answer

Merci pour tout jfk, probleme RESOLU :D

Fenetres internet s'ovrent seule + Log Hi Jak

25 réponses

Discussions similaires