Sujet Précédent Sujet Suivant

Infectée par vundo.dll

Résolu/Fermé
Autumn1608 Messages postés 88 Date d'inscription jeudi 5 avril 2007 Statut Membre Dernière intervention 4 décembre 2018 - 4 juin 2008 à 22:20
 Utilisateur anonyme - 6 juin 2008 à 19:51
Bonjour,

Voila Mon antivirus(Avast) me signale un cheval de troie(vundo.dll)...
Apres avoir cherché dans ce forum,j ai fait un scan Jackthis et voilà mon rapport...


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:16:47, on 4/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
c:\documents and settings\autumn\local settings\application data\wokuwok.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Seekmo /fleok=1D8A83A5C4ED13799EAC6D2A1FBB39BFE4976E26CAEDA120180A196D6093 - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.370.0\HostIE.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O3 - Toolbar: Seekmo - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.370.0\HostIE.dll (file missing)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data\third lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [wokuwok] c:\documents and settings\autumn\local settings\application data\wokuwok.exe wokuwok
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [E07FXLRD_8894968] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m (User 'Alex')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [CURB SPAM] C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe (User 'Alex')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-528292789-866590285-122395991-1010 Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O4 - S-1-5-21-528292789-866590285-122395991-1010 User Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk789YYBE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15-3.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: yayaaXPi - C:\WINDOWS\SYSTEM32\yayaaXPi.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

29 réponses

Précédent
  • 1
  • 2
Réponse 21 / 29
Autumn1608 Messages postés 88 Date d'inscription jeudi 5 avril 2007 Statut Membre Dernière intervention 4 décembre 2018 2
6 juin 2008 à 13:13
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:12:30, on 6/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data\third lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Splash screen for Avast!] C:\Program Files\Alwil Software\Avast4\ashAvast.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [E07FXLRD_8894968] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m (User 'Alex')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [CURB SPAM] C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe (User 'Alex')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-528292789-866590285-122395991-1010 Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O4 - S-1-5-21-528292789-866590285-122395991-1010 User Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
0
Réponse 22 / 29
Utilisateur anonyme
6 juin 2008 à 13:21
réouvre hijackthis
fais scan only
coche ces lignes :

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)


O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing)

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')


O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info

tu les coches et tu clic sur fix checked

ensuite fais ça :

Démarrer > executer > ' services.msc ' ,

- Clic droit sur le service cité - Logitech Process Monitor
- propriétés
- et dans "type de démarrage" et mets le sur « désactivé ».
- Ensuite si le "Status du service" est sur "Démarré" faire : « arrêté »

Tutorial : https://www.zebulon.fr/dossiers/windows/31-services.html

ensuite :

Télecharge et instal AVG anti spyware:

http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware


instal le et met le a jours

ensuite lance le scan et supprime

puis poste le rapport sur le forum stp


ensuite déisntal java car pas a jours et telecharge et instal cette version :


https://www.java.com/fr/download/manual.jsp

ensuite :


telecharge Ccleaner :

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

instal le sans la barre yahoo

fais lancer le nettoyage

repete l opération jusqu a ce qu il trouve rien

ensuite fais registre

fais chercher les erreures

ensuite fais corriger les erreures

repete l opération jusqu a ce qu il trouve rien


ensuit eregarde si tu trouve ce dossier :


C:\Documents and Settings\All Users\Application Data\third lies itch ford

si oui supprime le

ensuite refai sun scan hijackthis et poste le rapport stp
0
Réponse 23 / 29
Autumn1608 Messages postés 88 Date d'inscription jeudi 5 avril 2007 Statut Membre Dernière intervention 4 décembre 2018 2
6 juin 2008 à 15:25
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 14:45:03 6/06/2008

+ Résultat de l'analyse:



:mozilla.143:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.144:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.145:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.146:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.18:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.19:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.20:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.21:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.22:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.23:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.284:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.285:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.286:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.298:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.44:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.307:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.308:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.309:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.310:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.178:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.84:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.90:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.91:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.92:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.93:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.11:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.42:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.102:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.26:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.321:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.322:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.323:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.324:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.508:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.176:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.177:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.179:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.17:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.17:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@doubleclick[3].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.391:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Enhance : Nettoyé.
:mozilla.392:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Enhance : Nettoyé.
:mozilla.131:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.94:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.95:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.96:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.97:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.98:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.584:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.585:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.10:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.8:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.9:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Information : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@www.lop[1].txt -> TrackingCookie.Lop : Nettoyé.
:mozilla.379:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.45:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.292:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.129:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.164:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.165:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
C:\WINDOWS\system32\config\systemprofile\Cookies\system@skype[1].txt -> TrackingCookie.Skype : Nettoyé.
:mozilla.16:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.18:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.19:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.20:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.227:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.228:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.229:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@statcounter[1].txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.316:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.317:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.318:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.319:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.320:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.21:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.22:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.23:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.24:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.39:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.40:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.252:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.253:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.87:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.88:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.89:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.356:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.157:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.116:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.117:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.118:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.119:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.120:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.121:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.122:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.


Fin du rapport
0
Réponse 24 / 29
Autumn1608 Messages postés 88 Date d'inscription jeudi 5 avril 2007 Statut Membre Dernière intervention 4 décembre 2018 2
6 juin 2008 à 16:58
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:56:05, on 6/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Splash screen for Avast!] C:\Program Files\Alwil Software\Avast4\ashAvast.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 25 / 29
Utilisateur anonyme
6 juin 2008 à 17:09
OK C est clean !


regarde ceci concernant avast :

antivir vs avast :

-> http://forum.malekal.com/ftopic3528.php

alors je te conseille de le desinstaller et d´installer antivir a la place

Telecharge et instales l'antivirus Antivir Personal Edition Classic :

->https://www.malekal.com/avira-free-security-antivirus-gratuit/

https://www.avira.com/en/prime

http://mickael.barroux.free.fr/securite/antivir.php
http://speedweb1.free.fr/frames2.php?page=tuto5

Pour désinstaller Avast telecharge cet outil

https://www.avast.com/fr-fr/uninstall-utility


ensuite pour finir :


* pour supprimer les outils/fix utilisés :

Télécharge ToolsCleaner sur ton bureau.
-->
http://pagesperso-orange.fr/AceRothstein/ToolsCleaner2.exe
http://a-rothstein.changelog.fr/TC/ToolsCleaner2.exe

# Clique sur Recherche et laisse le scan agir ...
# Clique sur Suppression pour finaliser.
# Tu peux, si tu le souhaites, te servir des Options facultatives.
# Clique sur Quitter pour obtenir le rapport.
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
0
Réponse 26 / 29
Autumn1608 Messages postés 88 Date d'inscription jeudi 5 avril 2007 Statut Membre Dernière intervention 4 décembre 2018 2
6 juin 2008 à 18:30
-->- Recherche:

C:\Qoobox: trouvé !
C:\_OtMoveIt: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\autumn\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\autumn\Bureau\OtMoveIt2.exe: trouvé !
C:\Documents and Settings\autumn\Bureau\ComboFix.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\autumn\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\autumn\Bureau\OtMoveIt2.exe: supprimé !
C:\Documents and Settings\autumn\Bureau\ComboFix.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Qoobox: supprimé !
C:\_OtMoveIt: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
0
Réponse 27 / 29
Utilisateur anonyme
6 juin 2008 à 18:34
ok c est clean :


Si tu es satisfait de mon intervention

et que tu n as plus de probleme

change le statut du sujet en résolu stp

pour cela va en haut sur ta premiere question et la tu as le choix
0
Réponse 28 / 29
Autumn1608 Messages postés 88 Date d'inscription jeudi 5 avril 2007 Statut Membre Dernière intervention 4 décembre 2018 2
6 juin 2008 à 19:48
Ok Merci beaucoup pour ton aide et pour le temps que tu y a passé...Je suis tres tres tres satisfaite ; )))))
Bizzzz
Stef
0
Réponse 29 / 29
Utilisateur anonyme
6 juin 2008 à 19:51
de rien ciao et bon surf
0

Discussions similaires

Menace détectée TrojanSMS-PA sur Google Huawei/Android
Outmost -
bazfile -

6 réponses
Infectée par Adware.Agent !
Leila -
Leila -

8 réponses
USB Infectée !
Kimia77 -
Pierrecastor -

8 réponses
infectée par un pup op
lalanguette -
Smart91 -

48 réponses
Clé mémoire infectée
Nadysa -
Malekal_morte- -

14 réponses