Rapport hijackthis a décripter!!! - Page 2

Précédent
  • 1
  • 2
djeff-30
 
voila le suivant..activ scan:c'est bien panda??
;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-05-13 19:38:24
PROTECTIONS: 1
MALWARE: 22
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
avast! antivirus 4.8.1169 [VPS 080513-0] 4.8.1169 No Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@doubleclick[1].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\owen\AppData\Roaming\Microsoft\Windows\Cookies\Low\owen@doubleclick[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.atdmt.com/]
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\eilidh@atdmt[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@atdmt[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.atdmt.com/]
00139535 Application/Processor HackTools No 0 Yes No C:\Lop SD\Process.exe
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@tradedoubler[2].txt
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.247realmedia.com/]
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.247realmedia.com/]
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\owen\AppData\Roaming\Microsoft\Windows\Cookies\Low\owen@fastclick[2].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.tribalfusion.com/]
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@mediaplex[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Cookies\jeff@xiti[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\owen\AppData\Roaming\Microsoft\Windows\Cookies\Low\owen@xiti[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Cookies\Low\jeff@xiti[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.xiti.com/]
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.xiti.com/]
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[ad.yieldmanager.com/]
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[ad.yieldmanager.com/]
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[ad.yieldmanager.com/]
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[ad.yieldmanager.com/]
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[ad.yieldmanager.com/]
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\owen\AppData\Roaming\Microsoft\Windows\Cookies\Low\owen@apmebf[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@serving-sys[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.serving-sys.com/]
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.serving-sys.com/]
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.serving-sys.com/]
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.serving-sys.com/]
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.serving-sys.com/]
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.serving-sys.com/]
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.bs.serving-sys.com/]
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@bs.serving-sys[1].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Cookies\jeff@weborama[1].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.weborama.fr/]
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@weborama[1].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.weborama.fr/]
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.weborama.fr/]
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.weborama.fr/]
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.weborama.fr/]
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.weborama.fr/]
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\eilidh@weborama[2].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.weborama.fr/]
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Cookies\Low\jeff@weborama[1].txt
00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[fl01.ct2.comclick.com/]
00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[fl01.ct2.comclick.com/]
00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[fl01.ct2.comclick.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@advertising[2].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\eilidh@advertising[2].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.advertising.com/]
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Cookies\jeff@ads.pointroll[2].txt
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\owen\AppData\Roaming\Microsoft\Windows\Cookies\Low\owen@overture[1].txt
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@overture[1].txt
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.overture.com/]
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\eilidh@bluestreak[1].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@bluestreak[1].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\owen\AppData\Roaming\Microsoft\Windows\Cookies\Low\owen@bluestreak[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Microsoft\Windows\Cookies\Low\eilidh@smartadserver[2].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\owen\AppData\Roaming\Microsoft\Windows\Cookies\Low\owen@smartadserver[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Cookies\Low\jeff@smartadserver[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\eilidh\AppData\Roaming\Mozilla\Firefox\Profiles\iemn9a5j.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\jeff\AppData\Roaming\Mozilla\Firefox\Profiles\zeqkb84w.default\cookies.txt[.smartadserver.com/]
01176994 Bck/VB.XB Virus/Trojan No 0 No No C:\Users\jeff\AppData\Local\Mozilla\Firefox\Profiles\zeqkb84w.default\Cache\C2152591d01[327882R2FWJFW\NirCmdC.cfexe]
01176994 Bck/VB.XB Virus/Trojan No 0 No No C:\Users\jeff\Desktop\ComboFix.exe[327882R2FWJFW\NirCmdC.cfexe]
01185375 Application/Psexec.A HackTools No 0 Yes No C:\Windows\PSEXESVC.EXE
;===================================================================================================================================================================================
SUSPECTS
Sent Location ۖ@�(
3
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description ۖ@�(
3
;===================================================================================================================================================================================
184379 MEDIUM MS08-001 ۖ@�(
3
182048 HIGH MS07-069 ۖ@�(
3
176382 HIGH MS07-057 ۖ@�(
3
170906 HIGH MS07-045 ۖ@�(
3
164913 HIGH MS07-033 ۖ@�(
3
160623 HIGH MS07-027 ۖ@�(
3
;===================================================================================================================================================================================

je crois bien que cette fois il y a quelques trucs pas clairs!!!non??
0
djeff-30
 
bonsoir!!c'est fait!!je m'attendais a plus long comme rapport:j'espere que je n'ai rien oublié?

C:\Users\jeff\AppData\Local\Mozilla\Firefox\Profiles\zeqkb84w.default\Cache\C2152591d01 moved successfully.
File move failed. C:\Windows\PSEXESVC.EXE scheduled to be moved on reboot.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 05132008_230547

bon je vire OTMoveIt et je nettoie avec CCleaner(je l'ai déja!!)je revien demain dans la journée te dire si tout est ok...merci pour tout ça!!!
0
djeff-30
 
sur vista ce n'est pas "poste de travail" mais sur "ordinateur"..comme je ne savai pas comment passer par ce chemin j'ai chercher dans "recherches" et éliminé tout ce qui avais rapport a OTMOVIT j"espère avoir bien fait??
0
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
 
oui sur vista c'est ordinateur et pas poste de travail (c'est pratique d'avoir changé le nom...)

encore des soucis???
0
Précédent
  • 1
  • 2