Virus MSN "kes ta tofs fais sur ce site"
Résolu
Bonjour, donc comme un certain nombre de personne je possède le virus MSN sur mon ordi qui dit à mes contacts "qu'est ce ke fais ta tofs sur ce site?" et qui envois le virus, mais déjà, j'ai un bon point, le virus ne s'envoie pas à mes contacts, ils reçoivent juste la petite phrase 15fois par heur...!
Donc j'ai suivis ce que disais les forum, j'ai utiliser MSNFix, Vundo, antivir, un antispyware, antivirus, antimalware... et donc j'ai fais une analyse HijackThis et je voulais savoir si quelqu'un pouvait m'aider, merci d'avance. Voici le résultat:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:45:58, on 26/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\VIAudioi\HDADeck\HDeck.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Philips ToUcam Camera\VProperty.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ToUcamVProperty] C:\Program Files\Philips ToUcam Camera\VProperty.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [PMCLoader] C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe -checktasks
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://wanadoofr.oberon-media.com/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF04483F-F02E-4405-97D0-6CEB49862A7C}: NameServer = 192.168.1.1
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
--
End of file - 12900 bytes
Donc j'ai suivis ce que disais les forum, j'ai utiliser MSNFix, Vundo, antivir, un antispyware, antivirus, antimalware... et donc j'ai fais une analyse HijackThis et je voulais savoir si quelqu'un pouvait m'aider, merci d'avance. Voici le résultat:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:45:58, on 26/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\VIAudioi\HDADeck\HDeck.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Philips ToUcam Camera\VProperty.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ToUcamVProperty] C:\Program Files\Philips ToUcam Camera\VProperty.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [PMCLoader] C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe -checktasks
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://wanadoofr.oberon-media.com/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF04483F-F02E-4405-97D0-6CEB49862A7C}: NameServer = 192.168.1.1
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
--
End of file - 12900 bytes
Configuration: Windows XP Firefox 2.0.0.12
21 réponses
Résumé de la discussion
Problème rencontré : un virus MSN prolifère sur l'ordinateur en envoyant des messages répétitifs à des contacts et provoque une activité inhabituelle via Messenger. Des tentatives de nettoyage ont été entreprises, incluant MSNFix, Vundo, antispyware, antivirus et scans avec HijackThis, sans garantie d'élimination complète des éléments malveillants. Le rapport HijackThis fourni détaille de nombreuses entrées système et extensions, comme des services Avast/Avira, des modules Internet Explorer, des outils Wanadoo, et des éléments de démarrage variés. D'autres utilisateurs ont partagé des observations similaires et discuté des symptômes et des limites des outils, sans consensus clair sur une solution définitive à ce stade.
-
J'ai pas désinstaller Avast! mais j'ai suspendu la protection, seul Antivir marche et pendant le scan de Malwarebytes il a trouvé un trojan qui était: C:/WINDOWS/system32/^^^^.exe je l'ai supprimé avec Antivir
Voici le résultat du scan avec Malwarebytes:
Malwarebytes' Anti-Malware 1.09
Version de la base de données: 551
Type de recherche: Examen rapide
Eléments examinés: 50824
Temps écoulé: 15 minute(s), 0 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 2
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{09f1adac-76d8-4d0f-99a5-5c907dadb988} (Rogue.Multiple) -> No action taken.
Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4e7bd74f-2b8d-469e-86bd-fd60bb9aae3a} (Adware.OneToolBar) -> No action taken.
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
C:\Program Files\Fichiers communs\DriveCleaner Free (Rogue.DriveCleanerr) -> No action taken.
C:\Documents and Settings\Dubos\Application Data\DriveCleaner Free (Rogue.DriveCleaner) -> No action taken.
C:\Documents and Settings\Dubos\Application Data\DriveCleaner Free\Logs (Rogue.DriveCleaner) -> No action taken.
Fichier(s) infecté(s):
C:\Documents and Settings\Dubos\Application Data\DriveCleaner Free\Logs\update.log (Rogue.DriveCleaner) -> No action taken.
C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> No action taken. -
TON LOG EST BON
sauf juste une chose
Utilises tu des jeux de boonty games depuis longtemps ?
Voici une petite information sur Boonty games
Leur politique :
"Il se peut que nous partageons aussi des informations payantes avec des tiers
qui fournissent ds services payants et partage des données regroupées montrant le type
et le nombre de jeux videos que vous téléchargez, votre age, votre sexe, vos occupations,
niveau d'éducation, localité géographique, données sur l'équipement de votre ordinateur,
internet et intérêts pour les jeux videos, activités et entrainement des jeux édités.
De plus, nous partageons les adresses email avec des tiers fournisseurs de compte mails
qui nous assistent en envoyant nos mails a de nombreux clients en même temps..."
pour le supprimer
Fait
-> Démarrer
-> Exécuter...
Tape Services.msc puis valide
Double clique sur " Boonty Games "
Clique en bas sur " Arrêter "
Valide les changements.
-----
Ouvre Hijackthis puis:
-> Open the Misc Tools Section
-> Delete a NT Service
Tape " BOONTY " puis valide.
je suis creuvé
donne moi des nouvelles de ton pc demain
bonne nuit -
bonjour tu as 2 antivirus
tu désinstalle avast
http://www.commentcamarche.net/faq/sujet 8172 desinstaller proprement avast
tu telecharge MalwareByte's Anti-Malware
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
tu fais un scan et tu nettoie ce qui est trouvé et colle le rapport -
suprime tout ce qu'a trouvé Malwarebytes
aprés repost un nouveau rapport hijackthis-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:52:31, on 26/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\VIAudioi\HDADeck\HDeck.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Philips ToUcam Camera\VProperty.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ToUcamVProperty] C:\Program Files\Philips ToUcam Camera\VProperty.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [PMCLoader] C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe -checktasks
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://wanadoofr.oberon-media.com/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF04483F-F02E-4405-97D0-6CEB49862A7C}: NameServer = 192.168.1.1
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
-
-
n'oublie pas de supprimer avast, un seul antivirus
a+ -
bonjour jujulafee
pour bien régler antivir suit ce lien
https://forum.malekal.com/viewtopic.php?f=45&t=4192
en complément tu peut installer avg antispyware
http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware#description
pour nettoyer ton pc installe ccleaner
http://www.commentcamarche.net/telecharger/telecharger 168 ccleaner
a+ -
Merci, mais je prefère garder Avast!. J'ai Ad-aware SE personal avec Spybot, et j'ai déjà Ccleaner. ;)
Mais merci quand même, @+. -
Bonjour à tous, j'ai chopé ce sale virus de merde sur msn moi aussi, et comme une abrutie, j'ai cliqué sur le lien photo qui accepte le virus... j'arrete pas de détruire les trucs qu'avast me trouve mais ca revien tout le temps, et mon pc rame alors... si vous plé!! ...aidez moi!!!
-
j'ai eu un probleme un peu comme ça jé demandé a un réparateur de quoi ça venait il ma arrangé ça !!!
-
salut^^ moi aussi j'ai ce virus et j'arrive pas à l'enlever >< si quelqu'un pouvait m'aider...ça serait gentil.
j'ai fais une analyse HijackThis, voilà ce que ça donne:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:06:55, on 2/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\Acer TV-FM\PCMService.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Belgacom\bin\sprtcmd.exe
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\system32\NotifyPhoneBook.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ntse.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\program files\voipcheapcom\voipcheapcom.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\mrofinu.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Documents and Settings\Khalil\Bureau\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: speed-bit Toolbar - {2ba521ac-b9b9-4433-ba45-dba2f02cba5a} - C:\Program Files\speed-bit\tbspe0.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\^^^^^.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: speed-bit Toolbar - {2ba521ac-b9b9-4433-ba45-dba2f02cba5a} - C:\Program Files\speed-bit\tbspe0.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: speed-bit Toolbar - {2ba521ac-b9b9-4433-ba45-dba2f02cba5a} - C:\Program Files\speed-bit\tbspe0.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
O4 - HKLM\..\Run: [AME_CSA] rundll32 amecsa.cpl,RUN_DLL
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
O4 - HKLM\..\Run: [Belgacom] "C:\Program Files\Belgacom\bin\sprtcmd.exe" /P Belgacom
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Flash Media] C:\WINDOWS\system32\^^^^^.exe
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu1423.exe 61A847B5BBF7281336993B466188719AB689201522886B092CBD44BD8689220221DD325762EA4EBF968951185EFC412806867680AEDE604D64C2661373FD13E0DCD66A47
O4 - HKLM\..\Run: [ntse] C:\WINDOWS\system32\ntse.exe
O4 - HKLM\..\Run: [yee] C:\WINDOWS\system32\yee.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [VoipCheapCom] "C:\program files\voipcheapcom\voipcheapcom.exe" -nosplash -minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Print Spooler Service (y15tosu68i2) - Unknown owner - C:\WINDOWS\system32\ntse.exe
-
ok, je pensais qu'il faillait pas ouvrir plusieurs topic pour le même sujet.
-
Salut, j'ai aussi ce souci de fichier hosts pourtant pas recu de mail mais mon wlm marche plus ::
log file hijacjy ci-dessous
merci d'avance des commentaires
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:11:50, on 02.04.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20661)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\FRAPS\FRAPS.EXE
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logitech\KhalShared\KHALMNPR.EXE
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\McAfee\Common Framework\naPrdMgr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Administrateur\Bureau\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O4 - HKLM\..\Run: [Vistadrv] C:\Program Files\VistaDriveStatus\vsdrv.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\WINDOWS\system32\oodtray.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Fraps] C:\FRAPS\FRAPS.EXE
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/default.aspx
O17 - HKLM\System\CCS\Services\Tcpip\..\{D064EADF-8A3C-46A8-A18A-F0F354732A7D}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
End of file - 6076 bytes -
Crée ton propre post si tu veux que quelqu'un t'aide.
-
j'ai trouvé la solution en tout cas pour mon cas (j'avais pas le virus, enfin je pensais pas vu que je n'avais pas recu le fameux mail).
vu que j'avais rien sous msnfix, et que mon fichier hosts.bak était clean, j'ai lancé un spybot tout frais pour voir, il m'a trouvé 4 cookies trackeurs que j'ai viré (je sais pas si c'était cela), j'ai relancé live messenger et je suis connecté :) -
Malwarebytes' Anti-Malware 1.10
Version de la base de données: 586
Type de recherche: Examen complet (A:\|C:\|D:\|E:\|F:\|G:\|J:\|)
Eléments examinés: 130106
Temps écoulé: 1 hour(s), 11 minute(s), 0 second(s)
Processus mémoire infecté(s): 7
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 20
Valeur(s) du Registre infectée(s): 10
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1169
Fichier(s) infecté(s): 1771
Processus mémoire infecté(s):
c:\WINDOWS\mrofinu1423.exe (Trojan.Downloader) -> No action taken.
c:\program files\nvcoi\nvcoi.exe (Trojan.Agent) -> No action taken.
c:\program files\JavaCore\JavaCore.exe (Trojan.Insider) -> No action taken.
c:\documents and settings\administrateur\application data\WinTouch\WinTouch.exe (Trojan.Downloader) -> No action taken.
c:\Program Files\F?nts\msconfig.exe (Adware.ClickSpring) -> No action taken.
C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe (Rogue.DriveCleaner) -> No action taken.
Module(s) mémoire infecté(s):
C:\Program Files\CPV\CPV7.dll (Trojan.Downloader) -> No action taken.
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\testcpv6.bho (Trojan.Agent) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.Agent) -> No action taken.
HKEY_CLASSES_ROOT\testcpv6.bho.1 (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wintouch (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{4330bac6-0521-5cd6-0417-2e00b8c68dee} (Adware.ClickSpring) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4330bac6-0521-5cd6-0417-2e00b8c68dee} (Adware.ClickSpring) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{b2a3156e-3332-4b47-af5a-5b121503514f} (Rogue.WinAntivirus) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\internetgamebox (Adware.EGDAccess) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\CPV (Trojan.Downloader) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\BO1jiZmwnF2zhi (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\nvcoi (Trojan.Stars) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\MySearch (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\Software\Trymedia Systems (Adware.Trymedia) -> No action taken.
HKEY_CURRENT_USER\Software\xInsiDERexe (Adware.Agent) -> No action taken.
HKEY_CLASSES_ROOT\WR (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Outerinfo (Adware.PurityScan) -> No action taken.
HKEY_CURRENT_USER\Software\WinAntiVirus Pro 2006 (Rogue.WinAntivirus) -> No action taken.
HKEY_CURRENT_USER\Software\WinTouch (Adware.WinPop) -> No action taken.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\runner1 (Trojan.Downloader) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\nvcoi (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinTouch (Trojan.Downloader) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\JavaCore (Trojan.Insider) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Eanu (Adware.ClickSpring) -> No action taken.
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions\{59a40ac9-e67d-4155-b31d-4b7330fcd2d6} (Adware.PurityScan) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SDR6V_Check (Rogue.DriveCleaner) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WA6PV_Check (Rogue.DriveCleaner) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SfKg6w (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\BootStera (Rogue.WinAntivirus) -> No action taken.
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
C:\Program Files\WinAntiVirus Pro 2006 (Rogue.WinAntivirus) -> No action taken.
C:\Program Files\Fichiers communs\WinAntiVirus Pro 2006 (Rogue.WinAntivirus) -> No action taken.
C:\Documents and Settings\Administrateur\Application Data\WinAntiVirus Pro 2006 (Rogue.WinAntivirus) -> No action taken.
C:\Documents and Settings\Administrateur\Application Data\WinAntiVirus Pro 2006\Logs (Rogue.WinAntivirus) -> No action taken.
C:\Program Files\Outerinfo (Adware.Outerinfo) -> No action taken.
C:\Program Files\Outerinfo\FF (Adware.Outerinfo) -> No action taken.
C:\Program Files\Outerinfo\FF\components (Adware.Outerinfo) -> No action taken.
C:\Program Files\InetGet2 (Trojan.Downloader) -> No action taken.
C:\Program Files\Fichiers communs\DriveCleaner Free (Rogue.DriveCleaner) -> No action taken.
C:\Documents and Settings\Administrateur\Application Data\DriveCleaner Free (Rogue.DriveCleaner) -> No action taken.
C:\Documents and Settings\Administrateur\Application Data\DriveCleaner Free\Logs (Rogue.DriveCleaner) -> No action taken.
C:\Documents and Settings\Administrateur\Application Data\WinTouch (Adware.WinPop) -> No action taken.
C:\Program Files\Instant Access (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Center (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Center\Icons (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1011281962 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1013569520 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1015700467 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1020287940 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1022065500 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1024774700 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029698755 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1030494820 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1043184496 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1052962156 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1062595916 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1089072539 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1090909775 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1095627954 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1117275157 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1138263518 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1144930908 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1155531681 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1161436098 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1172898887 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1173788201 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1174604332 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1176388347 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\118660254 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1193931544 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1204324413 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1205077471 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1208721437 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1213101637 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\122164579 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\134893714 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\136188234 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\140966100 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\145059595 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\148665977 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\155179662 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\171221074 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\172299813 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\174378914 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\190045320 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\200622627 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\211637922 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\213518196 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22339953 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22517223 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\227468341 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\23096987 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\233206523 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\239666669 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\248235961 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\253216631 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\258065640 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\263431170 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\264490747 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\26883781 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\274026030 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\275710574 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\286990679 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\290269212 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\29120924 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\311409517 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\312119482 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\317162705 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\320636376 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\336778345 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\34226974 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\347410303 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\349830512 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\350313268 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\359872175 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\366686198 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\372528367 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\385826531 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\388713015 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\39023421 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\399776303 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\406371999 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\413595157 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\431762646 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\432212939 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\434331077 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\454453062 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\454561789 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\466642289 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\46919519 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\471023477 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\479720378 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\484732616 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\487115897 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\492477686 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\50353613 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\509909756 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\512010748 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\524315979 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\531542281 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\540214691 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\563393494 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\568003128 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\579759368 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\593908848 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\59444629 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\606829 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\609754886 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\613095747 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\61620042 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\616826367 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\636768021 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\639114677 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\646240454 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\659399237 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\665110079 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\673112778 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\676529440 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\676999525 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\687227872 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\704465634 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\709773543 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\720182999 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\730095312 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\737163101 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\744229370 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\746454894 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\748767952 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\752168191 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\756539523 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\768008157 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\799437857 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\805673444 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\813741847 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\816982755 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\840736964 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\841572545 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\854855178 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\868053949 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\8683773 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\875042673 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\877446704 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\878842628 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\888213114 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\899036403 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\899586513 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\900664405 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\904986860 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\906024744 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\916806028 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\920582731 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\924664338 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\924886194 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\940783839 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\940843456 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\940992851 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\94855626 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\964710366 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\981446464 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1011281962\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1011281962\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1011281962\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1011281962\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1011281962\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1011281962\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1013569520\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1013569520\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1013569520\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1013569520\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1013569520\fp.pc-on-internet.com\50255 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1013569520\fp.pc-on-internet.com\50255\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1015700467\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1015700467\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1015700467\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1015700467\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1015700467\fp.pc-on-internet.com\50146 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1015700467\fp.pc-on-internet.com\50146\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1020287940\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1020287940\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1020287940\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1020287940\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1020287940\fp.pc-on-internet.com\50298 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1020287940\fp.pc-on-internet.com\50298\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1022065500\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1022065500\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1022065500\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1022065500\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1022065500\fp.pc-on-internet.com\50287 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1022065500\fp.pc-on-internet.com\50287\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1024774700\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1024774700\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1024774700\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1024774700\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1024774700\fp.pc-on-internet.com\50181 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1024774700\fp.pc-on-internet.com\50181\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\es6-external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\es6-network.vizit.us (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\media.rapid-pass.net (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\network.vizit.us (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\www.epass-key.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\es6-external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\es6-network.vizit.us\Common (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\es6-network.vizit.us\custom (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\es6-network.vizit.us\custom\3262 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\es6-network.vizit.us\custom\3262\FR (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\media.rapid-pass.net\fullpages\vz_v3_celebrities (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\media.rapid-pass.net\fullpages\vz_v3_celebrities\fullpage01 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\media.rapid-pass.net\fullpages\vz_v3_celebrities\fullpage01\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\media.rapid-pass.net\fullpages\vz_v3_celebrities\fullpage01\images\FR (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029270802\network.vizit.us\Common (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029698755\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029698755\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029698755\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029698755\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029698755\fp.pc-on-internet.com\50141 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1029698755\fp.pc-on-internet.com\50141\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1030494820\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1030494820\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1030494820\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1030494820\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1030494820\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1030494820\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1043184496\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1043184496\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1043184496\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1043184496\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1043184496\fp.pc-on-internet.com\50256 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1043184496\fp.pc-on-internet.com\50256\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1052962156\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1052962156\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1052962156\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1052962156\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1052962156\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1052962156\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1062595916\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1062595916\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1062595916\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1062595916\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1062595916\fp.pc-on-internet.com\50246 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1062595916\fp.pc-on-internet.com\50246\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1089072539\es6-external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1089072539\es6-network.vizit.us (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1089072539\es6-external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1089072539\es6-network.vizit.us\Common (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1089072539\es6-network.vizit.us\custom (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1089072539\es6-network.vizit.us\custom\3262 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1089072539\es6-network.vizit.us\custom\3262\FR (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1090909775\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1090909775\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1090909775\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1090909775\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1090909775\fp.pc-on-internet.com\50220 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1090909775\fp.pc-on-internet.com\50220\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1095627954\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1095627954\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1095627954\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1095627954\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1095627954\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1095627954\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1117275157\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1117275157\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1117275157\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1117275157\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1117275157\fp.pc-on-internet.com\50287 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1117275157\fp.pc-on-internet.com\50287\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1138263518\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1138263518\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1138263518\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1138263518\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1138263518\fp.pc-on-internet.com\50256 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1138263518\fp.pc-on-internet.com\50256\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1144930908\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1144930908\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1144930908\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1144930908\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1144930908\fp.pc-on-internet.com\50188 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1144930908\fp.pc-on-internet.com\50188\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1155531681\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1155531681\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1155531681\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1155531681\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1155531681\fp.pc-on-internet.com\50287 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1155531681\fp.pc-on-internet.com\50287\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1161436098\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1161436098\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1161436098\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1161436098\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1161436098\fp.pc-on-internet.com\50307 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1161436098\fp.pc-on-internet.com\50307\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1161436098\fp.pc-on-internet.com\50307\Scripts (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1161436098\fp.pc-on-internet.com\50307\swf (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1172898887\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1172898887\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1172898887\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1172898887\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1172898887\fp.pc-on-internet.com\50256 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1172898887\fp.pc-on-internet.com\50256\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1173788201\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1173788201\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1173788201\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1173788201\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1173788201\fp.pc-on-internet.com\50275 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1173788201\fp.pc-on-internet.com\50275\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1174604332\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1174604332\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1174604332\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1174604332\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1174604332\fp.pc-on-internet.com\50255 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1174604332\fp.pc-on-internet.com\50255\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1176388347\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1176388347\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1176388347\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1176388347\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1176388347\fp.pc-on-internet.com\50287 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1176388347\fp.pc-on-internet.com\50287\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\118660254\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\118660254\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\118660254\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\118660254\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\118660254\fp.pc-on-internet.com\50209 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\118660254\fp.pc-on-internet.com\50209\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1193931544\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1193931544\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1193931544\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1193931544\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1193931544\fp.pc-on-internet.com\50266 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1193931544\fp.pc-on-internet.com\50266\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1204324413\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1204324413\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1204324413\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1204324413\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1204324413\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1204324413\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1205077471\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1205077471\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1205077471\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1205077471\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1205077471\fp.pc-on-internet.com\50256 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1205077471\fp.pc-on-internet.com\50256\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1208721437\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1208721437\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1208721437\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1208721437\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1208721437\fp.pc-on-internet.com\50256 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1208721437\fp.pc-on-internet.com\50256\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1213101637\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1213101637\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1213101637\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1213101637\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1213101637\fp.pc-on-internet.com\50256 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\1213101637\fp.pc-on-internet.com\50256\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\122164579\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\122164579\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\122164579\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\122164579\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\122164579\fp.pc-on-internet.com\50251 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\122164579\fp.pc-on-internet.com\50251\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\134893714\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\134893714\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\134893714\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\134893714\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\134893714\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\134893714\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\136188234\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\136188234\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\136188234\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\136188234\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\136188234\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\136188234\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\140966100\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\140966100\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\140966100\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\140966100\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\140966100\fp.pc-on-internet.com\50169 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\140966100\fp.pc-on-internet.com\50169\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\145059595\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\145059595\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\145059595\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\145059595\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\145059595\fp.pc-on-internet.com\50146 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\145059595\fp.pc-on-internet.com\50146\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\148665977\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\148665977\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\148665977\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\148665977\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\148665977\fp.pc-on-internet.com\50169 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\148665977\fp.pc-on-internet.com\50169\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\155179662\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\155179662\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\155179662\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\155179662\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\155179662\fp.pc-on-internet.com\50269 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\155179662\fp.pc-on-internet.com\50269\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\171221074\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\171221074\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\171221074\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\171221074\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\171221074\fp.pc-on-internet.com\50256 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\171221074\fp.pc-on-internet.com\50256\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\172299813\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\172299813\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\172299813\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\172299813\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\172299813\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\172299813\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\174378914\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\174378914\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\174378914\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\174378914\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\174378914\fp.pc-on-internet.com\50275 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\174378914\fp.pc-on-internet.com\50275\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\190045320\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\190045320\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\190045320\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\190045320\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\190045320\fp.pc-on-internet.com\50220 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\190045320\fp.pc-on-internet.com\50220\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\200622627\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\200622627\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\200622627\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\200622627\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\200622627\fp.pc-on-internet.com\50287 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\200622627\fp.pc-on-internet.com\50287\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\211637922\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\211637922\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\211637922\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\211637922\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\211637922\fp.pc-on-internet.com\50176 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\211637922\fp.pc-on-internet.com\50176\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\213518196\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\213518196\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\213518196\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\213518196\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\213518196\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\213518196\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22339953\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22339953\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22339953\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22339953\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22339953\fp.pc-on-internet.com\50137 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22339953\fp.pc-on-internet.com\50137\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22517223\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22517223\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22517223\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22517223\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22517223\fp.pc-on-internet.com\50256 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\22517223\fp.pc-on-internet.com\50256\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\227468341\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\227468341\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\227468341\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\227468341\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\227468341\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\227468341\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\23096987\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\23096987\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\23096987\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\23096987\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\23096987\fp.pc-on-internet.com\50188 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\23096987\fp.pc-on-internet.com\50188\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\233206523\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\233206523\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\233206523\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\233206523\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\233206523\fp.pc-on-internet.com\50275 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\233206523\fp.pc-on-internet.com\50275\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\239666669\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\239666669\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\239666669\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\239666669\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\239666669\fp.pc-on-internet.com\50298 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\239666669\fp.pc-on-internet.com\50298\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\248235961\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\248235961\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\248235961\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\248235961\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\248235961\fp.pc-on-internet.com\50243 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\248235961\fp.pc-on-internet.com\50243\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\253216631\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\253216631\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\253216631\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\253216631\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\253216631\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\253216631\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\258065640\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\258065640\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\258065640\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\258065640\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\258065640\fp.pc-on-internet.com\50272 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\258065640\fp.pc-on-internet.com\50272\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\263431170\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\263431170\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\263431170\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\263431170\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\263431170\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\263431170\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\264490747\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\264490747\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\264490747\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\264490747\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\264490747\fp.pc-on-internet.com\50275 (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\264490747\fp.pc-on-internet.com\50275\images (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\26883781\external-api.dlv4.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\26883781\fp.pc-on-internet.com (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\26883781\external-api.dlv4.com\hits (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instant Access\Dialer\26883781\external-api.dlv4.com\js (Adware.EGDAccess) -> No action taken.
C:\Program Files\Instan -
essayer bitdefender telechargable sur telecharger.com moi il la trouver et eliminer
-
MSNFix 1.670
C:\Documents and Settings\pc\Bureau\liouigt\msnfix
Fix exécuté le 21/04/2008 - 17:25:14,64 By pc
mode normal
************************ Recherche les fichiers présents
... C:\DOCUME~1\pc\LOCALS~1\Temp\winlogon.exe
... C:\WINDOWS\system32\real.txt
... C:\DOCUME~1\pc\LOCALS~1\Temp\winlogon.exe
... C:\DOCUME~1\pc\LOCALS~1\Temp\winlogon.exe
************************ Recherche les dossiers présents
Aucun dossier trouvé
************************ Suppression des fichiers
/!\ ... C:\DOCUME~1\pc\LOCALS~1\Temp\winlogon.exe
.. OK ... C:\WINDOWS\system32\real.txt
/!\ ... C:\DOCUME~1\pc\LOCALS~1\Temp\winlogon.exe
/!\ ... C:\DOCUME~1\pc\LOCALS~1\Temp\winlogon.exe
************************ Nettoyage du registre
Les fichiers encore présents seront supprimés au prochain redémarrage
************************ Suppression des fichiers
/!\ ... C:\DOCUME~1\pc\LOCALS~1\Temp\winlogon.exe
/!\ ... C:\DOCUME~1\pc\LOCALS~1\Temp\winlogon.exe
/!\ ... C:\DOCUME~1\pc\LOCALS~1\Temp\winlogon.exe
************************ Fichiers suspects
Aucun Fichier trouvé
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 21042008_17273810.zip
------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------
--------------------------------------------- END --------------------------------------------- -
je connais un bon anti-virus qui a sauvé mon ordi d'un trojan
voici le nom : NOD32
c'est génial mais un peu compliqué -
J'avais exactement le même virus j'ai cliqué et été contaminer mais on ma dit de téléchargé NOD32 depuis plus rien =)
-
Vérifier que votre par-feu na aucune exception! Et qu'il est activé bien sur!!!
- 1
- 2
Suivant
