désistaller antivirus 2008 Résolu

Question

Bonjour,
J ai ANTIVIRUS 2008 (avec logo windows) qui s'est installé et me demande de payer
J ai voulu le désinstaller mais je n 'y arrive pas j ai installer Avast Home
ANTIVIRUS 2008 n arrete pas de s ouvrir
J ai plein de fenetre qui s ouvre 
Quand je veux me connecter jsuis sur une page qui me demande si je suis sur de vouloir continuer ce qui me bloque l acces a la page internet
C'est l enfer !!!
En plus je n arrive plus a ouvrir mes fichiers word !
La totale quoi !
So could you help me !!

Luffy87 · Answer

Tu as essayer de supprimer le fichier dans ton disque local ?

Utilisateur anonyme · Answer

Salut

Télécharge HijackThis ici : 

->  http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe 


Tutoriel d´instalation : (Merci a Balltrap34 pour cette réalisation) 

-> http://pageperso.aol.fr/balltrap34/Hijenr.gif 

Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation) 

-> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm 

Post le rapport généré ici stp...

julienduhavre · Answer

Va dans démarrer>panneaux de configuration>Ajout/supression programmes>et tu cherche antivirus 2008 et tu fé modifier/désinstaler pis après tatens .


Si c'est déja fait va dans Poste de travail>Disque local C:>Program files> Et clique droit sur le dossier antivirus 2008 et supprimer!


Voila

housmous · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:51:15, on 09/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CmWatch.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe
C:\Program Files\Seekmo\bin\10.0.424.0\OEAddOn.exe
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSA.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
C:\Program Files\Antivirus2008y\antvrs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iolo\System Mechanic 7\SMTrayNotify.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Seekmo\bin\10.0.424.0\Srv.exe
C:\PROGRA~1\Wanadoo\WOOBRO~1\DownloadManager.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Hacked by Godzilla
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: Seekmo /fleok=1D8A83A5C2E713769BA86B2A1FBB39BFE4976E26CAEDA120180A196D6093 - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.424.0\HostIE.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Seekmo - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.424.0\HostIE.dll
O4 - HKLM\..\Run: [CmCardRun] C:\WINDOWS\system32\CmWatch.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Ultimate Fixer] "C:\Program Files\Ultimate Fixer\UltimateFixer.exe" hide
O4 - HKLM\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [SeekmoOE] C:\Program Files\Seekmo\bin\10.0.424.0\OEAddOn.exe
O4 - HKLM\..\Run: [SeekmoSA] "C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSA.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Antivirus2008y] C:\Program Files\Antivirus2008y\antvrs.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Editeur audio basic - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Akimania\Editeur Audio Basic\Studio enregistrement (file missing)
O9 - Extra 'Tools' menuitem: &Editeur audio basic - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Akimania\Editeur Audio Basic\Studio enregistrement (file missing)
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: Yahoo! Chess - http://download2.games.yahoo.com/games/clients/y/ct5_x.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C9E17F58-564C-41C6-989F-AB0FE0D2C9D1} (PopcapLoader Object) - http://jeuxenligne.orange.fr/orange2.0/OnlineHSS/zuma/Popcap.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{55F9591A-12EF-4811-B474-6B95F89A5E13}: NameServer = 85.255.115.102,85.255.112.120
O17 - HKLM\System\CCS\Services\Tcpip\..\{BB889EEB-6A72-4709-8CF5-F9A38BE19C55}: NameServer = 85.255.115.102,85.255.112.120
O17 - HKLM\System\CCS\Services\Tcpip\..\{D2E9AD16-F28B-4296-BF7B-D6F29CC52A52}: NameServer = 85.255.115.102,85.255.112.120
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.102 85.255.112.120
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.102 85.255.112.120
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

Utilisateur anonyme · Answer

plusieures infections 

commence par désinstaller sweet im via le panneau de configuration 

ensuite :

Telecharge malwarebytes 

-> http://www.malwarebytes.org/mbam/program/mbam-setup.exe 

Tu l´instale; le programme va se mettre automatiquement a jour. 

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression". 

Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet". 

Puis click sur "rechercher". 

Laisse le scanner le pc... 

Si des elements on ete trouvés > click sur supprimer la selection. 

si il t´es demandé de redemarrer > click sur "yes". 

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum. 

Copie et colle le rapport stp.

ps : les rapport sont aussi rangé dans l onglet rapport/log

julienduhavre · Answer

O16 - DPF: Yahoo! Chess - http://download2.games.yahoo.com/games/clients/y/ct5_x.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/default.aspx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C9E17F58-564C-41C6-989F-AB0FE0D2C9D1} (PopcapLoader Object) - http://jeuxenligne.orange.fr/orange2.0/OnlineHSS/zuma/Popcap.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab  

suprimme tt sa

Utilisateur anonyme · Answer

supprimer les actives X n est pas la priorité.......

sunmagellan · Answer

http://siri.urz.free.fr/Fix/SmitfraudFix.php

telecharge ce truc

pas la peine de sortir un poste, de toute façon le pc est pris bien comme il faut, plus de fond ecran modifiable, ni de windows update, et la base de registre je vous raconte pas...

sunmagellan · Answer

Alors???

housmous · Answer

Malwarebytes' Anti-Malware 1.20
Version de la base de données: 935
Windows 5.1.2600 Service Pack 2

21:17:55 09/07/2008
mbam-log-7-9-2008 (21-17-34).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 92942
Temps écoulé: 45 minute(s), 42 second(s)

Processus mémoire infecté(s): 4
Module(s) mémoire infecté(s): 6
Clé(s) du Registre infectée(s): 115
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 18
Dossier(s) infecté(s): 36
Fichier(s) infecté(s): 1091

Processus mémoire infecté(s):
C:\Program Files\Seekmo\bin\10.0.424.0\Srv.exe (Adware.Zango) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\OEAddOn.exe (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSA.exe (Adware.180Solutions) -> No action taken.
C:\Program Files\Antivirus2008y\antvrs.exe (Rogue.Antivirus2008) -> No action taken.

Module(s) mémoire infecté(s):
C:\Program Files\Seekmo\bin\10.0.424.0\CoreSrv.dll (Adware.Hotbar) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\HostIE.dll (Adware.Zango) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\Toolbar.dll (Adware.Zango) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSAAX.dll (Adware.Seekmo) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\HostOE.dll (Adware.180Solutions) -> No action taken.
c:\program files\Seekmo\bin\10.0.424.0\seekmosahook.dll (Adware.180Solutions) -> No action taken.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\hbcoresrv.dynamicprop (Adware.Hotbar) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{229d2451-a617-4b30-b5e8-8138694240cb} (Adware.Hotbar) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{1e0004ec-5df0-48c7-a8f0-fbb0488a3d94} (Adware.Hotbar) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{b0cb585f-3271-4e42-88d9-ae5c9330d554} (Adware.Hotbar) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{d2221ccb-f2bb-4858-aad4-57c754153603} (Adware.Hotbar) -> No action taken.
HKEY_CLASSES_ROOT\hbcoresrv.dynamicprop.1 (Adware.Hotbar) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7e66936c-fea0-4984-ad26-7b6661ac5b2e} (Adware.Hotbar) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{00b77587-be1b-4201-b8e9-09fcf50ab771} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{067c6a37-72ea-4437-863a-5be20c246f3c} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\hostie.bho (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{087c4054-0a2b-4f35-b0db-bed3e21650f4} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{93b0fa7b-50f6-41b4-ac7e-612a72ce8c3c} (Adware.Zango) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{93b0fa7b-50f6-41b4-ac7e-612a72ce8c3c} (Adware.Zango) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{93b0fa7b-50f6-41b4-ac7e-612a72ce8c3c} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{ea0b6a1a-6a59-4a58-9c41-9966504898a5} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\hostie.bho.1 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{34e29700-0d13-46aa-b9a5-ace68e21a091} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{3661af2d-c27b-499c-9bcf-66c8502a3806} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{99123ac9-7dda-4c82-b252-44c2804bf392} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{08755390-f46d-4d09-968c-3430166b3189} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{8971cb48-9fca-445a-be77-e8e8a4cc9df7} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{b88e4484-3ff6-4ea9-815b-a54fe20d4387} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{5a4737a8-b92a-4e54-970e-c2891d98ce3f} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{ace99e77-aa2a-43c2-8c9d-caf2020fdf2b} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{e0fb1610-b25b-49f6-be20-751b2f230e6f} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{3f0915b8-b238-4c2d-ad1e-60db1e14d27a} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{ea58c2ea-be26-49dd-9b9a-c8e4e5ca7791} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{fca28ac5-c1e1-4d67-a5ae-c44d6c374d9f} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{0923208c-e259-4ed5-a778-cb607da350ad} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{1230cf51-6bc4-4a23-b3f1-c7cf0afed619} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{1a2af056-1fe1-47ca-993d-5d09d18e674e} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{2e623b96-b166-4c70-8169-820761794299} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{4e8b851b-05b0-4baf-b24d-d0dfe88dded3} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{50c3e2b3-4fd7-4cb9-91f9-641a6e6b3689} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{62b0b239-f9ac-4a5b-bfae-62c7a23f7627} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{726f0ab9-b842-4ae4-90c7-230e233e6a99} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{b9cc2b92-5611-453f-8381-8b6f72d9c0b8} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{c4543e64-1498-410d-8e72-4744eea99ab9} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{2b81f920-6660-4f76-93bf-b1c67bf5d1a0} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{49155dae-c471-40fa-98ee-b2b3cad115ce} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{4d783385-0dda-4188-a529-c97dc3d67cbd} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\wallpaper.wallpapermanager (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{c23fa5a4-1fea-419f-8b14-f7465df062bc} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\wallpaper.wallpapermanager.1 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT	oolbar.htmlmenuui (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{ccc6e232-aa4c-4813-a019-9c14b27776b6} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{5b2e150d-4c8a-40e4-8c36-dd9c02771c67} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{627d894a-8a77-416e-b522-432eaf2c818e} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT	oolbar.htmlmenuui.1 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT	oolbar.toolbarctl (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT	oolbar.toolbarctl.1 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{6e10479b-31e8-4a3b-81b1-ddaf39097f19} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\srv.coreservices (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\srv.coreservices.1 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{7138f250-5b72-48dd-adfb-9a83b429dd9e} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\hostol.mailanim (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\hostol.mailanim.1 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\hbmain.commband (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\hbmain.commband.1 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\coresrv.lfgax (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\coresrv.lfgax.1 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{b247f5bf-bd9d-4ecd-8fc1-365f36a1fda1} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\hostol.webmailsend (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\hostol.webmailsend.1 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{bbbfb891-98ae-4678-86f3-bd5a2eed86c9} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{bf1bf02c-5a86-4ecf-adac-472c54c4d21e} (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\coresrv.coreservices (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\coresrv.coreservices.1 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\hbr.hbmain (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\hbr.hbmain.1 (Adware.Zango) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eddbb5ee-bb64-4bfc-9dbe-e7c85941335b} (Adware.Zango) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Installer\Features\9ee2330ae5f4470cac801baac83818c9 (Adware.Zango) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Installer\Products\568267acfc5644dab06f058006ddbae3 (Adware.Zango) -> No action taken.
HKEY_CLASSES_ROOT\seekmo.desktopflash (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\seekmo.desktopflash.1 (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{914a8f99-38e4-47ec-b875-2b0653516030} (Adware.Seekmo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{914a8f99-38e4-47ec-b875-2b0653516030} (Adware.Seekmo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{914a8f99-38e4-47ec-b875-2b0653516030} (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\seekmoax.clientdetector (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{fbb40fdf-b715-4342-ab82-244ecc66e979} (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{1f158a1e-a687-4a11-9679-b3ac64b86a1c} (Adware.Seekmo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1f158a1e-a687-4a11-9679-b3ac64b86a1c} (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{e313f5dc-cfe7-4568-84a4-c76653547571} (Adware.Seekmo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e313f5dc-cfe7-4568-84a4-c76653547571} (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\seekmoax.clientdetector.1 (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\seekmoax.userprofiles (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\seekmoax.userprofiles.1 (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{bd5258af-20ae-4bd3-b748-b2851aca7335} (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{995e885e-3ff5-4f66-a107-8bfb3a0f8f12} (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{4a40e8fc-c7e4-4f57-9fa4-85dd77402897} (Adware.Seekmo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\antivirus2008y (Rogue.Antivirus2008) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\antivirus2008y (Rogue.Antivirus2008) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\ParisHilton (Adware.NaviPromo) -> No action taken.
HKEY_CURRENT_USER\Software\ParisHilton (Adware.NaviPromo) -> No action taken.
HKEY_CLASSES_ROOT\AppID\seekmo.desktopflash (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\AppID\seekmo.desktopflash.1 (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\AppID\seekmoax.clientdetector (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\AppID\seekmoax.clientdetector.1 (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\AppID\seekmoax.userprofiles (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\AppID\seekmoax.userprofiles.1 (Adware.Seekmo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\seekmo (Adware.Seekmo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\seekmosa (Adware.Seekmo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\seekmosa (Adware.Seekmo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Carlson (Dialer) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Carlson (Dialer) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\seekmo (Adware.Seekmo) -> No action taken.
HKEY_CLASSES_ROOT\VideoAXObject.Chl (Trojan.Zlob) -> No action taken.
HKEY_CLASSES_ROOT\videoaccessactivex.Chl (Trojan.Zlob) -> No action taken.
HKEY_CLASSES_ROOT\VCLSDCompression.class (Rogue.Installer) -> No action taken.
HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers\UCSecureDelete (Rogue.Ultimate.Cleaner) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\UCSecureDelete (Rogue.Ultimate.Cleaner) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\seekmooe (Adware.180Solutions) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\seekmosa (Adware.180Solutions) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\antivirus2008y (Rogue.Antivirus2008) -> No action taken.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102 85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{941597d3-6190-4c4c-af9b-b724648a35fd}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{bb889eeb-6a72-4709-8cf5-f9a38be19c55}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{d2e9ad16-f28b-4296-bf7b-d6f29cc52a52}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102 85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{941597d3-6190-4c4c-af9b-b724648a35fd}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{bb889eeb-6a72-4709-8cf5-f9a38be19c55}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{d2e9ad16-f28b-4296-bf7b-d6f29cc52a52}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102 85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{941597d3-6190-4c4c-af9b-b724648a35fd}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{bb889eeb-6a72-4709-8cf5-f9a38be19c55}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{d2e9ad16-f28b-4296-bf7b-d6f29cc52a52}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> No action taken.

Dossier(s) infecté(s):
C:\Program Files\Seekmo (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0 (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\components (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\plugins (Adware.180Solutions) -> No action taken.
C:\Program Files\Ultimate Fixer (Rogue.Ultimate.Fixer) -> No action taken.
C:\Casino (Adware.Casino) -> No action taken.
C:\Program Files\Fichiers communs\Carlson (Dialer) -> No action taken.
C:\Documents and Settings\All Users\Application Data\SeekmoSA (Adware.Seekmo) -> No action taken.
C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 (Adware.Seekmo) -> No action taken.
C:\Program Files\Antivirus2008y (Rogue.Antivirus2008) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Ultimate Fixer (Rogue.Ultimate.Fixer) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Ultimate Fixer\backup (Rogue.Ultimate.Fixer) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Ultimate Fixer\logs (Rogue.Ultimate.Fixer) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\IESkins (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0 (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOI (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOI\dynamic (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOI\static (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\dynamic (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1 (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\ustat (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\static (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\static\1 (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\static\2 (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Antivirus2008y (Rogue.Antivirus2008) -> No action taken.

Fichier(s) infecté(s):
C:\Program Files\Seekmo\bin\10.0.424.0\CoreSrv.dll (Adware.Hotbar) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\HostIE.dll (Adware.Zango) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\HostOL.dll (Adware.Zango) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\Srv.exe (Adware.Zango) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\Wallpaper.dll (Adware.Zango) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\Toolbar.dll (Adware.Zango) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSAAX.dll (Adware.Seekmo) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSADF.exe (Adware.Seekmo) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\arrow.ico (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\copyright.txt (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\HostOE.dll (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\link.ico (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\OEAddOn.exe (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSA.exe (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSAHook.dll (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoUnInstaller.exe (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\chrome.manifest (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\install.rdf (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\components
pclntax.xpt (Adware.180Solutions) -> No action taken.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\plugins
pclntax_SeekmoSA.dll (Adware.180Solutions) -> No action taken.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSA.dat (Adware.Seekmo) -> No action taken.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAAbout.mht (Adware.Seekmo) -> No action taken.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAau.dat (Adware.Seekmo) -> No action taken.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAEULA.mht (Adware.Seekmo) -> No action taken.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSA_kyf.dat (Adware.Seekmo) -> No action taken.
C:\Program Files\Antivirus2008y\antvrs.exe (Rogue.Antivirus2008) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte10_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte11_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte12_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte13_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte14_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte19_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte20_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte21_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte9_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030203lib_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102angel_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102bigluf_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102bigsmile_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102birthday_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102cheers_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102flo_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102good_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102jump_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102king_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102lough_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102luf_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102smiled_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102smile_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102sor_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102thanx_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102uhu_1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\040103ahh_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\040103wow_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\040104_emi2_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\042102_1134_112_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\050103big_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\050103gig_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\050103hm_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\050103nomail_emoti_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\050103norm_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema15_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema16_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema17_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema18_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema19_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema20_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema21_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema24_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema25_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema26_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema30_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema33_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema34_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\062802hippi_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\062802jumpie_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\080402argh_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\080402oops_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\080402ouch_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\082502no_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\082502yes_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_boring1_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_confused_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_crying_ugly_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_fantastic_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_feel_better_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_gimme_break_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_heehee_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_hlopaet_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_ign_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_lol_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_no_comment_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_peace_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_smashing_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_talk2thehand_prv.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\blocked.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\blocked2.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\block_sm.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\block_sm2.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\block_smli.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\block_smli2.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_add-but.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_back-but.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_left_cut_enabled_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_left_enabled_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_left_pressed_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_middle_enabled_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_middle_pressed_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_right_cut_enabled_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_right_enabled_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_right_pressed_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\business_promo.htm (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\buttondir.txt (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\components.cdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\css2_main.css (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\css2_pagingmodule.css (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\css2_topbuttons.css (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\css_cattree.css (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\css_flashpreview.css (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\cursors.res (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\delete.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\edit_clear_sound.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\edit_fs.htm (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\edit_select.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-543450.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-548964.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-589306.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-591943.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-592579.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-598579.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-603763.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-9595.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-9696.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511745-514279.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-backgrounds.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-bcards.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-ecards.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-emoticons.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-estationery.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-funny.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-help.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-images.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-info.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-more.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-my.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-new.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-new2.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-options.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-people.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-photo.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-tell.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-temp.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-text.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-voice.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def.cdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-premium-email-premium.mnu (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-t1-bg.res (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-temp-bg.res (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\estatationery.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\flashpatch.js (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\flashpreview.htm (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\fs3.htm (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\hotbar_promo.htm (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_checked_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_close_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_close_pressed_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_edit_preview.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_edit_send.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_flash_preview.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_recently_used.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_remove_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_remove_pressed_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_sand-clock2.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_tell_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_tell_pressed_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_tree_null.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_unchecked_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_unchecked_pressed_1.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\img_barlayout.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\img_barlayout2.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\img_barlayout4.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\img_corner_left.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\img_local_logo.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_basetemplate.js (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_hbgroups.js (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_hbobject3.js (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_hbobjectset3.js (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_hotbarwrapper.js (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_iteratorsandreaders3nf.js (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_pagingmoduleobj3.js (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_texts3.js (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_xmltree3nf.js (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\layout.cdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\linkpathlegal.txt (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1
.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1
av_bb_2.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1
av_b_2.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1
av_ff_2.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1
av_f_2.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\progress.res (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\pro_hb_fo_word.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\sales_buttons.res (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\searchbtn.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\seekmo_btn.res (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\submit.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_bg.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_bga.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_bgia.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_l.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_la.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_lia.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_r.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_ra.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_ria.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_animations.xml (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_backgrounds.xml (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_ecards.xml (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_emoticons.xml (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_notifiers.xml (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_text.xml (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ree_dots.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ree_minus.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ree_plus.gif (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\business_promo.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\buttondir.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\code.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\cursors.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\email-def.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\email-t1-bg.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\email-temp-bg.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\hotbar_promo.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\images.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\layout.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\linkpathlegal.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\localcontent.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\progress.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\pro_hb_fo_word.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\sales_buttons.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\seekmo_btn.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad	reexml.xip (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1032719.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1041655.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1042745.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1049051.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1054344.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1056027.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1059014.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1060233.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1064372.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1066608.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1067612.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\11959.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1224397.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1383356.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1384147.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1384287.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1384736.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1384900.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1386771.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1387231.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1388868.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1390732.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1390909.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1391612.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1394204.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1394940.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1397883.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1398044.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1400812.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1402657.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1404209.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1404245.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1404802.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1404867.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1408056.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1415040.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1416861.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1448114.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1566244.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1583282.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1633035.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1633071.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1735592.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1811744.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1864057.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1866764.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\1910659.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\2208948.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\221540.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\2373025.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\23845.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\2390706.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\2492150.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\251320.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\2525321.sdf (AdWare.Agent) -> No action taken.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\d

housmous · Answer

chiquitine29 j ai suivi se que tu m as dis de faire je viens juste de poster le rapport malwarebytes

Utilisateur anonyme · Answer

No action taken

as tu supprimé la selection a la fin du scan ??

si oui as tu le rapport qui le confirme (regarde dans rapport log)

sunmagellan · Answer

et ben ça fait des trucs  lire.
untruc le fichier volume restaur est verolé aussi,
clé de registre impossible de rectifier....

temps estimer pour supprimer antivirus 2008 : 
15 minutes. 
bonne nuit

housmous · Answer

ah oui ça doi etre ça !!


Malwarebytes' Anti-Malware 1.20
Version de la base de données: 935
Windows 5.1.2600 Service Pack 2

21:20:18 09/07/2008
mbam-log-7-9-2008 (21-20-15).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 92942
Temps écoulé: 45 minute(s), 42 second(s)

Processus mémoire infecté(s): 4
Module(s) mémoire infecté(s): 6
Clé(s) du Registre infectée(s): 115
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 18
Dossier(s) infecté(s): 36
Fichier(s) infecté(s): 1091

Processus mémoire infecté(s):
C:\Program Files\Seekmo\bin\10.0.424.0\Srv.exe (Adware.Zango) -> Unloaded process successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\OEAddOn.exe (Adware.180Solutions) -> Unloaded process successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSA.exe (Adware.180Solutions) -> Unloaded process successfully.
C:\Program Files\Antivirus2008y\antvrs.exe (Rogue.Antivirus2008) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\Program Files\Seekmo\bin\10.0.424.0\CoreSrv.dll (Adware.Hotbar) -> Unloaded module successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\HostIE.dll (Adware.Zango) -> Unloaded module successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\Toolbar.dll (Adware.Zango) -> Unloaded module successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSAAX.dll (Adware.Seekmo) -> Unloaded module successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\HostOE.dll (Adware.180Solutions) -> Unloaded module successfully.
c:\program files\Seekmo\bin\10.0.424.0\seekmosahook.dll (Adware.180Solutions) -> Unloaded module successfully.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\hbcoresrv.dynamicprop (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{229d2451-a617-4b30-b5e8-8138694240cb} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1e0004ec-5df0-48c7-a8f0-fbb0488a3d94} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b0cb585f-3271-4e42-88d9-ae5c9330d554} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d2221ccb-f2bb-4858-aad4-57c754153603} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbcoresrv.dynamicprop.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7e66936c-fea0-4984-ad26-7b6661ac5b2e} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{00b77587-be1b-4201-b8e9-09fcf50ab771} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{067c6a37-72ea-4437-863a-5be20c246f3c} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostie.bho (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{087c4054-0a2b-4f35-b0db-bed3e21650f4} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{93b0fa7b-50f6-41b4-ac7e-612a72ce8c3c} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{93b0fa7b-50f6-41b4-ac7e-612a72ce8c3c} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{93b0fa7b-50f6-41b4-ac7e-612a72ce8c3c} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{ea0b6a1a-6a59-4a58-9c41-9966504898a5} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostie.bho.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{34e29700-0d13-46aa-b9a5-ace68e21a091} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3661af2d-c27b-499c-9bcf-66c8502a3806} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{99123ac9-7dda-4c82-b252-44c2804bf392} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{08755390-f46d-4d09-968c-3430166b3189} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8971cb48-9fca-445a-be77-e8e8a4cc9df7} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b88e4484-3ff6-4ea9-815b-a54fe20d4387} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{5a4737a8-b92a-4e54-970e-c2891d98ce3f} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{ace99e77-aa2a-43c2-8c9d-caf2020fdf2b} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e0fb1610-b25b-49f6-be20-751b2f230e6f} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3f0915b8-b238-4c2d-ad1e-60db1e14d27a} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{ea58c2ea-be26-49dd-9b9a-c8e4e5ca7791} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{fca28ac5-c1e1-4d67-a5ae-c44d6c374d9f} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{0923208c-e259-4ed5-a778-cb607da350ad} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1230cf51-6bc4-4a23-b3f1-c7cf0afed619} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1a2af056-1fe1-47ca-993d-5d09d18e674e} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2e623b96-b166-4c70-8169-820761794299} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{4e8b851b-05b0-4baf-b24d-d0dfe88dded3} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{50c3e2b3-4fd7-4cb9-91f9-641a6e6b3689} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{62b0b239-f9ac-4a5b-bfae-62c7a23f7627} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{726f0ab9-b842-4ae4-90c7-230e233e6a99} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{b9cc2b92-5611-453f-8381-8b6f72d9c0b8} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{c4543e64-1498-410d-8e72-4744eea99ab9} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2b81f920-6660-4f76-93bf-b1c67bf5d1a0} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{49155dae-c471-40fa-98ee-b2b3cad115ce} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{4d783385-0dda-4188-a529-c97dc3d67cbd} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\wallpaper.wallpapermanager (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{c23fa5a4-1fea-419f-8b14-f7465df062bc} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\wallpaper.wallpapermanager.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT	oolbar.htmlmenuui (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{ccc6e232-aa4c-4813-a019-9c14b27776b6} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{5b2e150d-4c8a-40e4-8c36-dd9c02771c67} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{627d894a-8a77-416e-b522-432eaf2c818e} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT	oolbar.htmlmenuui.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT	oolbar.toolbarctl (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT	oolbar.toolbarctl.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6e10479b-31e8-4a3b-81b1-ddaf39097f19} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\srv.coreservices (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\srv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7138f250-5b72-48dd-adfb-9a83b429dd9e} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostol.mailanim (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostol.mailanim.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbmain.commband (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbmain.commband.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\coresrv.lfgax (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\coresrv.lfgax.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{b247f5bf-bd9d-4ecd-8fc1-365f36a1fda1} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostol.webmailsend (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostol.webmailsend.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{bbbfb891-98ae-4678-86f3-bd5a2eed86c9} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{bf1bf02c-5a86-4ecf-adac-472c54c4d21e} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\coresrv.coreservices (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\coresrv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbr.hbmain (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbr.hbmain.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eddbb5ee-bb64-4bfc-9dbe-e7c85941335b} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Installer\Features\9ee2330ae5f4470cac801baac83818c9 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Installer\Products\568267acfc5644dab06f058006ddbae3 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\seekmo.desktopflash (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\seekmo.desktopflash.1 (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{914a8f99-38e4-47ec-b875-2b0653516030} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{914a8f99-38e4-47ec-b875-2b0653516030} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{914a8f99-38e4-47ec-b875-2b0653516030} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\seekmoax.clientdetector (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{fbb40fdf-b715-4342-ab82-244ecc66e979} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1f158a1e-a687-4a11-9679-b3ac64b86a1c} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1f158a1e-a687-4a11-9679-b3ac64b86a1c} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e313f5dc-cfe7-4568-84a4-c76653547571} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e313f5dc-cfe7-4568-84a4-c76653547571} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\seekmoax.clientdetector.1 (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\seekmoax.userprofiles (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\seekmoax.userprofiles.1 (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{bd5258af-20ae-4bd3-b748-b2851aca7335} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{995e885e-3ff5-4f66-a107-8bfb3a0f8f12} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{4a40e8fc-c7e4-4f57-9fa4-85dd77402897} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\antivirus2008y (Rogue.Antivirus2008) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\antivirus2008y (Rogue.Antivirus2008) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\ParisHilton (Adware.NaviPromo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\ParisHilton (Adware.NaviPromo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\seekmo.desktopflash (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\seekmo.desktopflash.1 (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\seekmoax.clientdetector (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\seekmoax.clientdetector.1 (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\seekmoax.userprofiles (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\seekmoax.userprofiles.1 (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\seekmo (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\seekmosa (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\seekmosa (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Carlson (Dialer) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Carlson (Dialer) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\seekmo (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\VideoAXObject.Chl (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\videoaccessactivex.Chl (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\VCLSDCompression.class (Rogue.Installer) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers\UCSecureDelete (Rogue.Ultimate.Cleaner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\UCSecureDelete (Rogue.Ultimate.Cleaner) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\seekmooe (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\seekmosa (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\antivirus2008y (Rogue.Antivirus2008) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102 85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{941597d3-6190-4c4c-af9b-b724648a35fd}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{bb889eeb-6a72-4709-8cf5-f9a38be19c55}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{d2e9ad16-f28b-4296-bf7b-d6f29cc52a52}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102 85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{941597d3-6190-4c4c-af9b-b724648a35fd}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{bb889eeb-6a72-4709-8cf5-f9a38be19c55}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{d2e9ad16-f28b-4296-bf7b-d6f29cc52a52}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102 85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{55f9591a-12ef-4811-b474-6b95f89a5e13}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{941597d3-6190-4c4c-af9b-b724648a35fd}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{bb889eeb-6a72-4709-8cf5-f9a38be19c55}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{d2e9ad16-f28b-4296-bf7b-d6f29cc52a52}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.102,85.255.112.120 -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Program Files\Seekmo (Adware.180Solutions) -> Delete on reboot.
C:\Program Files\Seekmo\bin (Adware.180Solutions) -> Delete on reboot.
C:\Program Files\Seekmo\bin\10.0.424.0 (Adware.180Solutions) -> Delete on reboot.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\components (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\plugins (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Ultimate Fixer (Rogue.Ultimate.Fixer) -> Quarantined and deleted successfully.
C:\Casino (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\Fichiers communs\Carlson (Dialer) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Program Files\Antivirus2008y (Rogue.Antivirus2008) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Ultimate Fixer (Rogue.Ultimate.Fixer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Ultimate Fixer\backup (Rogue.Ultimate.Fixer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Ultimate Fixer\logs (Rogue.Ultimate.Fixer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\IESkins (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0 (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOI (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOI\dynamic (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOI\static (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\dynamic (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1 (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\dynamic\ustat (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\static (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\static\1 (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\static\2 (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Antivirus2008y (Rogue.Antivirus2008) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\Seekmo\bin\10.0.424.0\CoreSrv.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\HostIE.dll (Adware.Zango) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\HostOL.dll (Adware.Zango) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\Srv.exe (Adware.Zango) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\Wallpaper.dll (Adware.Zango) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\Toolbar.dll (Adware.Zango) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSAAX.dll (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSADF.exe (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\arrow.ico (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\copyright.txt (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\HostOE.dll (Adware.180Solutions) -> Delete on reboot.
C:\Program Files\Seekmo\bin\10.0.424.0\link.ico (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\OEAddOn.exe (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSA.exe (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoSAHook.dll (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\SeekmoUnInstaller.exe (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\chrome.manifest (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\install.rdf (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\components
pclntax.xpt (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Program Files\Seekmo\bin\10.0.424.0\firefox\extensions\plugins
pclntax_SeekmoSA.dll (Adware.180Solutions) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSA.dat (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAAbout.mht (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAau.dat (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAEULA.mht (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSA_kyf.dat (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Program Files\Antivirus2008y\antvrs.exe (Rogue.Antivirus2008) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte10_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte11_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte12_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte13_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte14_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte19_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte20_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte21_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030104_emte9_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\030203lib_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102angel_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102bigluf_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102bigsmile_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102birthday_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102cheers_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102flo_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102good_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102jump_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102king_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102lough_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102luf_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102smiled_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102smile_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102sor_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102thanx_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\033102uhu_1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\040103ahh_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\040103wow_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\040104_emi2_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\042102_1134_112_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\050103big_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\050103gig_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\050103hm_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\050103nomail_emoti_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\050103norm_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema15_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema16_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema17_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema18_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema19_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema20_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema21_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema24_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema25_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema26_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema30_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema33_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\060104_ema34_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\062802hippi_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\062802jumpie_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\080402argh_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\080402oops_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\080402ouch_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\082502no_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\082502yes_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_boring1_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_confused_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_crying_ugly_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_fantastic_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_feel_better_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_gimme_break_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_heehee_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_hlopaet_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_ign_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_lol_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_no_comment_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_peace_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_smashing_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\110103_talk2thehand_prv.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\blocked.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\blocked2.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\block_sm.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\block_sm2.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\block_smli.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\block_smli2.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_add-but.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_back-but.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_left_cut_enabled_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_left_enabled_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_left_pressed_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_middle_enabled_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_middle_pressed_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_right_cut_enabled_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_right_enabled_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\btn_right_pressed_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\business_promo.htm (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\buttondir.txt (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\components.cdf (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\css2_main.css (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\css2_pagingmodule.css (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\css2_topbuttons.css (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\css_cattree.css (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\css_flashpreview.css (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\cursors.res (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\delete.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\edit_clear_sound.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\edit_fs.htm (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\edit_select.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-543450.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-548964.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-589306.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-591943.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-592579.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-598579.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-603763.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-9595.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511724-9696.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-511745-514279.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-backgrounds.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-bcards.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-ecards.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-emoticons.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-estationery.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-funny.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-help.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-images.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-info.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-more.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-my.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-new.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-new2.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-options.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-people.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-photo.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-tell.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-temp.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-text.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def-email-voice.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-def.cdf (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-premium-email-premium.mnu (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-t1-bg.res (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\email-temp-bg.res (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\estatationery.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\flashpatch.js (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\flashpreview.htm (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\fs3.htm (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\hotbar_promo.htm (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_checked_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_close_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_close_pressed_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_edit_preview.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_edit_send.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_flash_preview.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_recently_used.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_remove_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_remove_pressed_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_sand-clock2.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_tell_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_tell_pressed_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_tree_null.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_unchecked_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\icon_unchecked_pressed_1.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\img_barlayout.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\img_barlayout2.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\img_barlayout4.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\img_corner_left.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\img_local_logo.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_basetemplate.js (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_hbgroups.js (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_hbobject3.js (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_hbobjectset3.js (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_hotbarwrapper.js (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_iteratorsandreaders3nf.js (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_pagingmoduleobj3.js (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_texts3.js (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\js2_xmltree3nf.js (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\layout.cdf (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\linkpathlegal.txt (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1
.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1
av_bb_2.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1
av_b_2.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1
av_ff_2.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1
av_f_2.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\progress.res (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\pro_hb_fo_word.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\sales_buttons.res (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\searchbtn.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\seekmo_btn.res (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1\submit.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_bg.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_bga.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_bgia.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_l.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_la.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_lia.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_r.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_ra.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ab_ria.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_animations.xml (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_backgrounds.xml (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_ecards.xml (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_emoticons.xml (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_notifiers.xml (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	reedata_text.xml (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ree_dots.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ree_minus.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\1	ree_plus.gif (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\business_promo.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\buttondir.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\code.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\cursors.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\email-def.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\email-t1-bg.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\email-temp-bg.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\hotbar_promo.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\images.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\layout.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\linkpathlegal.xip (AdWare.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Seekmo\v3.0\HostOL\static\DownLoad\localcontent.xip (AdWare.Agent) -> Quarantined and

sunmagellan · Answer

maintenat il va pouvoir un beau fond d'ecran.

1000 excuses

Utilisateur anonyme · Answer

réouvre malewarebyte
va sur quarantaine 
supprime tout 

comment va le pc ???

refais un scan hjackthis et post le rapport stp

housmous · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:16:14, on 09/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\CmWatch.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Hacked by Godzilla
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [CmCardRun] C:\WINDOWS\system32\CmWatch.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Ultimate Fixer] "C:\Program Files\Ultimate Fixer\UltimateFixer.exe" hide
O4 - HKLM\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Editeur audio basic - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Akimania\Editeur Audio Basic\Studio enregistrement (file missing)
O9 - Extra 'Tools' menuitem: &Editeur audio basic - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Akimania\Editeur Audio Basic\Studio enregistrement (file missing)
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: Yahoo! Chess - http://download2.games.yahoo.com/games/clients/y/ct5_x.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C9E17F58-564C-41C6-989F-AB0FE0D2C9D1} (PopcapLoader Object) - http://jeuxenligne.orange.fr/orange2.0/OnlineHSS/zuma/Popcap.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

Utilisateur anonyme · Answer

Réouvre hijackthis
fais scan only
coches ces lignes :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Hacked by Godzilla 


O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing) 

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') 
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) 


O9 - Extra button: Editeur audio basic - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Akimania\Editeur Audio Basic\Studio enregistrement (file missing) 
O9 - Extra 'Tools' menuitem: &Editeur audio basic - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Akimania\Editeur Audio Basic\Studio enregistrement (file missing) 
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU) 
O16 - DPF: Yahoo! Chess - http://download2.games.yahoo.com/games/clients/y/ct5_x.cab 
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab 
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/ 
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab 
O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab 
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab 
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/default.aspx 
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab 
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab 
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab 
O16 - DPF: {C9E17F58-564C-41C6-989F-AB0FE0D2C9D1} (PopcapLoader Object) - http://jeuxenligne.orange.fr/orange2.0/OnlineHSS/zuma/Popcap.cab 
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab 
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab 
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab 


tu les coches et tu clic sur fix checked 


ensuite :


Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 


-> Double clique combofix.exe. 
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

Avant d'utiliser ComboFix : 

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. 

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message. 

-> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

housmous · Answer

ComboFix 08-07-08.9 - Propriétaire 2008-07-09 22:44:29.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.232 [GMT 2:00] Endroit: C:\Documents and Settings\Propriétaire\Bureau\combofix.exe * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\autorun.inf C:\Documents and Settings\Propriétaire\Local Settings\Application Data\ifoarlpm_navfx.dat C:\Documents and Settings\Propriétaire\Local Settings\Application Data\silfxfstv_navfx.dat C:\Documents and Settings\Propriétaire\Local Settings\Application Data\yiqqc.dat C:\Documents and Settings\Propriétaire\Local Settings\Application Data\yiqqc.exe c:\Documents and Settings\Propriétaire\Local Settings\Application Data\yiqqc_nav.dat C:\Documents and Settings\Propriétaire\Local Settings\Application Data\yiqqc_navfx.dat C:\Documents and Settings\Propriétaire\Local Settings\Application Data\yiqqc_navps.dat C:\WINDOWS\system32\Microsoft\backup.ftp C:\WINDOWS\system32\Microsoft\backup.tftp C:\WINDOWS\system32 etwbix32.dll D:\Autorun.inf H:\autorun.inf . ((((((((((((((((((((((((((((( Fichiers créés 2008-06-09 to 2008-07-09 )))))))))))))))))))))))))))))))))))) . 2008-07-09 20:00 . 2008-07-09 20:00 d-------- C:\Documents and Settings\Propriétaire\Application Data\Malwarebytes 2008-07-09 20:00 . 2008-07-07 17:35 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-07-09 19:59 . 2008-07-09 20:00 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-07-09 19:59 . 2008-07-09 19:59 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-07-09 19:59 . 2008-07-07 17:35 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-07-09 19:50 . 2008-07-09 19:50 d-------- C:\Program Files\Trend Micro 2008-07-09 10:36 . 2008-07-09 10:36 268 --ah----- C:\sqmdata17.sqm 2008-07-09 10:36 . 2008-07-09 10:36 244 --ah----- C:\sqmnoopt17.sqm 2008-07-08 15:36 . 2008-07-08 15:37 d-------- C:\WINDOWS\system32\NtmsData 2008-07-03 17:10 . 2008-07-03 17:11 d-------- C:\Program Files\eMule . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-09 20:42 --------- d-----w C:\Program Files\Wanadoo 2008-07-09 20:39 --------- d-----w C:\Program Files\CFWebAdvancedU 2008-07-09 19:18 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\vmntoolbar 2008-07-07 07:41 5,852 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys 2008-07-07 07:41 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\Corel 2008-07-02 10:59 --------- d-----w C:\Program Files\VideoLAN 2008-06-07 16:31 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-06-07 16:29 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\AdobeUM 2008-03-03 13:04 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat 2007-10-17 23:18 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe 2007-02-26 01:03 1,140,304 -c--a-w C:\Documents and Settings\All Users\Application Data\pswi_preloaded.exe 2005-08-27 11:30 5,065 ----a-w C:\WINDOWS\inf\SETD.tmp 2007-06-09 09:41 248 --sh--r C:\WINDOWS\system32\31F674FCA2.sys 2007-08-30 21:48 9,104 --sh--r C:\WINDOWS\system32\msivs10.dll 2007-08-30 21:46 9,104 --sh--r C:\WINDOWS\system32\msivsvt.dll . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360] "MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [2001-07-25 11:00 192568] "SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2006-06-06 10:07 40960] "WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 15:50 122880] "TVAgent WiFi"="C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe" [2005-04-12 17:44 905216] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CmCardRun"="C:\WINDOWS\system32\CmWatch.exe" [2003-09-16 11:50 229376] "MoneyStartUp10.0"="C:\Program Files\Microsoft Money\System\Activation.exe" [2001-07-25 11:00 245810] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2005-01-12 15:54 241664] "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-17 00:11 49152] "Corel Photo Downloader"="C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe" [2006-10-31 12:10 478800] "ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2005-02-16 16:15 221184] "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-02-16 16:15 81920] "SMSystemAnalyzer"="C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe" [2007-10-03 10:05 819560] "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 15:49 20480] "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 17:55 32768] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-16 01:19 79224] "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 11:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader eader_sl.exe [2008-04-23 03:38:16 29696] Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [2000-01-21 10:15:56 65588] [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\MSN Messenger\msnmsgr.exe"= "C:\Program Files\MSN Messenger\livecall.exe"= "C:\Program Files\Wanadoo\WOOBrowser\WOOBrowser.exe"= "C:\Program Files\Mozilla Firefox\firefox.exe"= "C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe"= "C:\Program Files\eMule\eMule.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16] R3 rtl8180;Realtek RTL8180 Wireless LAN (Mini-)PCI NIC NT Driver;C:\WINDOWS\system32\DRIVERS\RTL8180.SYS [2003-12-04 04:10] R3 SCREAMINGBDRIVER;Screaming Bee Audio;C:\WINDOWS\system32\drivers\ScreamingBAudio.sys [2006-09-27 00:21] R3 UMSSSTOR;C-Media Storage;C:\WINDOWS\system32\DRIVERS\UMSS.SYS [2003-09-16 08:48] S1 lusbaudio;Microphone USB Logitech;C:\WINDOWS\system32\drivers\OVSound2.sys [2001-08-17 22:05] S3 Boonty Games;Boonty Games;C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2007-04-15 22:07] S3 QCAbsee;QuickCam Web Logitech (0801);C:\WINDOWS\system32\DRIVERS\OVCA.sys [2001-08-17 22:05] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c0b72d8-7346-11dc-bded-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c0b72d9-7346-11dc-bded-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2d1d6e2c-7e7d-11dc-be06-d1742e29724a}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{707eac62-7a3b-11dc-be00-cf80e5dbcf51}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{91b8a5be-c76f-11db-bc24-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae3b7915-c800-11db-bc27-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe *Newly Created Service* - CATCHME . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-07-09 20:16:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . - - - - ORPHANS REMOVED - - - - HKCU-Run-msnmsgr - ~C:\Program Files\MSN Messenger\msnmsgr.exe HKLM-Run-Cmaudio - cmicnfg.cpl HKLM-Run-DXDllRegExe - dxdllreg.exe ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-09 22:48:01 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-07-09 22:49:05 ComboFix-quarantined-files.txt 2008-07-09 20:49:02 Pre-Run: 144,351,232 octets libres Post-Run: 1,037,791,232 octets libres 141 --- E O F --- 2007-11-14 16:55:45

housmous · Answer

ComboFix 08-07-08.9 - Propriétaire 2008-07-09 22:44:29.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.232 [GMT 2:00] Endroit: C:\Documents and Settings\Propriétaire\Bureau\combofix.exe * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\autorun.inf C:\Documents and Settings\Propriétaire\Local Settings\Application Data\ifoarlpm_navfx.dat C:\Documents and Settings\Propriétaire\Local Settings\Application Data\silfxfstv_navfx.dat C:\Documents and Settings\Propriétaire\Local Settings\Application Data\yiqqc.dat C:\Documents and Settings\Propriétaire\Local Settings\Application Data\yiqqc.exe c:\Documents and Settings\Propriétaire\Local Settings\Application Data\yiqqc_nav.dat C:\Documents and Settings\Propriétaire\Local Settings\Application Data\yiqqc_navfx.dat C:\Documents and Settings\Propriétaire\Local Settings\Application Data\yiqqc_navps.dat C:\WINDOWS\system32\Microsoft\backup.ftp C:\WINDOWS\system32\Microsoft\backup.tftp C:\WINDOWS\system32 etwbix32.dll D:\Autorun.inf H:\autorun.inf . ((((((((((((((((((((((((((((( Fichiers créés 2008-06-09 to 2008-07-09 )))))))))))))))))))))))))))))))))))) . 2008-07-09 20:00 . 2008-07-09 20:00 d-------- C:\Documents and Settings\Propriétaire\Application Data\Malwarebytes 2008-07-09 20:00 . 2008-07-07 17:35 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-07-09 19:59 . 2008-07-09 20:00 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-07-09 19:59 . 2008-07-09 19:59 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-07-09 19:59 . 2008-07-07 17:35 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-07-09 19:50 . 2008-07-09 19:50 d-------- C:\Program Files\Trend Micro 2008-07-09 10:36 . 2008-07-09 10:36 268 --ah----- C:\sqmdata17.sqm 2008-07-09 10:36 . 2008-07-09 10:36 244 --ah----- C:\sqmnoopt17.sqm 2008-07-08 15:36 . 2008-07-08 15:37 d-------- C:\WINDOWS\system32\NtmsData 2008-07-03 17:10 . 2008-07-03 17:11 d-------- C:\Program Files\eMule . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-09 20:42 --------- d-----w C:\Program Files\Wanadoo 2008-07-09 20:39 --------- d-----w C:\Program Files\CFWebAdvancedU 2008-07-09 19:18 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\vmntoolbar 2008-07-07 07:41 5,852 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys 2008-07-07 07:41 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\Corel 2008-07-02 10:59 --------- d-----w C:\Program Files\VideoLAN 2008-06-07 16:31 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-06-07 16:29 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\AdobeUM 2008-03-03 13:04 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat 2007-10-17 23:18 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe 2007-02-26 01:03 1,140,304 -c--a-w C:\Documents and Settings\All Users\Application Data\pswi_preloaded.exe 2005-08-27 11:30 5,065 ----a-w C:\WINDOWS\inf\SETD.tmp 2007-06-09 09:41 248 --sh--r C:\WINDOWS\system32\31F674FCA2.sys 2007-08-30 21:48 9,104 --sh--r C:\WINDOWS\system32\msivs10.dll 2007-08-30 21:46 9,104 --sh--r C:\WINDOWS\system32\msivsvt.dll . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360] "MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [2001-07-25 11:00 192568] "SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2006-06-06 10:07 40960] "WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 15:50 122880] "TVAgent WiFi"="C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe" [2005-04-12 17:44 905216] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CmCardRun"="C:\WINDOWS\system32\CmWatch.exe" [2003-09-16 11:50 229376] "MoneyStartUp10.0"="C:\Program Files\Microsoft Money\System\Activation.exe" [2001-07-25 11:00 245810] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2005-01-12 15:54 241664] "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-17 00:11 49152] "Corel Photo Downloader"="C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe" [2006-10-31 12:10 478800] "ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2005-02-16 16:15 221184] "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-02-16 16:15 81920] "SMSystemAnalyzer"="C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe" [2007-10-03 10:05 819560] "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 15:49 20480] "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 17:55 32768] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-16 01:19 79224] "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 11:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader eader_sl.exe [2008-04-23 03:38:16 29696] Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [2000-01-21 10:15:56 65588] [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\MSN Messenger\msnmsgr.exe"= "C:\Program Files\MSN Messenger\livecall.exe"= "C:\Program Files\Wanadoo\WOOBrowser\WOOBrowser.exe"= "C:\Program Files\Mozilla Firefox\firefox.exe"= "C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe"= "C:\Program Files\eMule\eMule.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16] R3 rtl8180;Realtek RTL8180 Wireless LAN (Mini-)PCI NIC NT Driver;C:\WINDOWS\system32\DRIVERS\RTL8180.SYS [2003-12-04 04:10] R3 SCREAMINGBDRIVER;Screaming Bee Audio;C:\WINDOWS\system32\drivers\ScreamingBAudio.sys [2006-09-27 00:21] R3 UMSSSTOR;C-Media Storage;C:\WINDOWS\system32\DRIVERS\UMSS.SYS [2003-09-16 08:48] S1 lusbaudio;Microphone USB Logitech;C:\WINDOWS\system32\drivers\OVSound2.sys [2001-08-17 22:05] S3 Boonty Games;Boonty Games;C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2007-04-15 22:07] S3 QCAbsee;QuickCam Web Logitech (0801);C:\WINDOWS\system32\DRIVERS\OVCA.sys [2001-08-17 22:05] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c0b72d8-7346-11dc-bded-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c0b72d9-7346-11dc-bded-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2d1d6e2c-7e7d-11dc-be06-d1742e29724a}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{707eac62-7a3b-11dc-be00-cf80e5dbcf51}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{91b8a5be-c76f-11db-bc24-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae3b7915-c800-11db-bc27-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe *Newly Created Service* - CATCHME . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-07-09 20:16:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . - - - - ORPHANS REMOVED - - - - HKCU-Run-msnmsgr - ~C:\Program Files\MSN Messenger\msnmsgr.exe HKLM-Run-Cmaudio - cmicnfg.cpl HKLM-Run-DXDllRegExe - dxdllreg.exe ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-09 22:48:01 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-07-09 22:49:05 ComboFix-quarantined-files.txt 2008-07-09 20:49:02 Pre-Run: 144,351,232 octets libres Post-Run: 1,037,791,232 octets libres 141 --- E O F --- 2007-11-14 16:55:45

Utilisateur anonyme · Answer

Copie le texte ci-dessous : 


File:: 
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe 

Folder:: 
C:\Program Files\Fichiers communs\BOONTY Shared
C:\Program Files\Macrogaming

Registry:: 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
"SweetIM"=-

Driver::
Boonty Games




Ouvre le Bloc-Notes puis colle le texte copié. 
(Démarrer\Tous les programmes\Accessoires\Bloc notes.) 
Sauvegarde ce fichier sous le nom de CFScript.txt. 

Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous : 

http://sd-1.archive-host.com/membres/up/1366464061/CFScript.gif 

Cela va relancer Combofix, 

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide. 

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal! 

Ne touche à rien tant que le scan n'est pas terminé. 

Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis. 

S'il n'y a pas de rédémarrage, poste quand même les rapports.

Utilisateur anonyme · Answer

va dans poste de travail
entre dans le disque C
cherche : combofix.txt le second ....

housmous · Answer

VOILA LE RAPPORT HIJACK
ENCORE MERCI BEAUCOUP


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:37, on 2008-07-09
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\CmWatch.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Microsoft Money\System\urlmap.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [CmCardRun] C:\WINDOWS\system32\CmWatch.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

housmous · Answer

ComboFix 08-07-08.9 - Propriétaire 2008-07-09 23:22:57.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.204 [GMT 2:00] Endroit: C:\Documents and Settings\Propriétaire\Bureau\combofix.exe Command switches used :: C:\Documents and Settings\Propriétaire\Bureau\CFScript.txt..txt * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] FILE :: C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe C:\Program Files\Macrogaming\SweetIM\SweetIM.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\Fichiers communs\BOONTY Shared C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe C:\Program Files\Macrogaming C:\Program Files\Macrogaming\SweetIM\conf\adapter.xml C:\Program Files\Macrogaming\SweetIM\conf\logger.xml C:\Program Files\Macrogaming\SweetIM\conf\messages.xml C:\Program Files\Macrogaming\SweetIM\conf\sweetim.xml C:\Program Files\Macrogaming\SweetIM\conf\sweetimapp.xml C:\Program Files\Macrogaming\SweetIM\conf\users\adil.h@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\adil.h@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\lastuse_Audibles.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\lastuse_SoundFX.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\lastuse_SpecialFX.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\lastuse_Winks.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\angedemonpkpas@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\angedemonpkpas@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\anna_fhal@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\anna_fhal@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\armand.bour@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\armand.bour@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\babyboy13010@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\babyboy13010@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\bibise94@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\bibise94@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\billy703@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\billy703@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\celine_fhal@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\celine_fhal@hotmail.com\lastuse_SoundFX.xml C:\Program Files\Macrogaming\SweetIM\conf\users\celine_fhal@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\celine21mars@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\celine21mars@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\double_face13@msn.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\double_face13@msn.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoferock@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoferock@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoph01@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoph01@hotmail.fr\lastuse_SoundFX.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoph01@hotmail.fr\lastuse_SpecialFX.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoph01@hotmail.fr\lastuse_Winks.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoph01@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\fmahalma@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\fmahalma@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\gabi2205@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\gabi2205@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\hypnose003@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\hypnose003@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\jamel-dine@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\jamel-dine@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\komando-fada@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\komando-fada@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\komando_13@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\komando_13@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lescelines@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lescelines@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lindab10@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lindab10@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lindab25@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lindab25@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\main_user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mohlies@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mohlies@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mymybilly@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mymybilly@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mynoucha@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mynoucha@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users enflo0013@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users enflo0013@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users onald_0@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users onald_0@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\samsebavie@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\samsebavie@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\sebastienbour@msn.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\sebastienbour@msn.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\shnaider81@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\shnaider81@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\simplysimple@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\simplysimple@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\sss_zeralda_love@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\sss_zeralda_love@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users hegunners13@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users hegunners13@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users itanic@coeur.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users itanic@coeur.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users iti_120@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users iti_120@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\w-116@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\w-116@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\w-16@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\w-16@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\yayelle@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\yayelle@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\zeralda-bilel-zeralda@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\zeralda-bilel-zeralda@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100AA.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100AB.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100AC.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100AE.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100B3.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100B6.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100B7.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100C5.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100C8.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100D1.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100D2.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100D5.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100D8.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100DF.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100E8.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100FA.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100FD.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100FE.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010104.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010105.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010106.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010108.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010109.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001010A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010121.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010122.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010123.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010124.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010814.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001081A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001081C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010840.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010841.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010846.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010847.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010848.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001084A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001084B.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001084C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001084D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010850.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010857.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010859.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001085D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001085E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010861.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001088D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001088F.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010893.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010896.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010897.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001089B.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001089C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001089D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108A7.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108AA.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108AB.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108AD.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108BE.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108C2.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002006C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002006D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002006E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020075.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020077.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020079.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002007A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002007D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000200A9.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000200BF.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000200C0.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000200C1.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000200ED.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002010E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020119.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002013F.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020144.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020185.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002018E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000201C7.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030001.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030005.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030007.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030011.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030013.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030019.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0003001B.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0003001D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030040.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030045.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0003005F.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040015.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004001C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004001E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004001F.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040021.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040022.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040024.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040025.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004002A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004002B.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004002C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040039.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004003C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040047.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004004A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004005A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004005F.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040061.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040063.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040067.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004006B.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004006E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040073.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040078.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040083.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000400A3.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000400AC.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000400C3.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000400C4.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00050001.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00050002.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00050004.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00050005.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00060024.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0006006A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0006007D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0006007E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000600A7.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000600DD.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\cache_indx.dat C:\Program Files\Macrogaming\SweetIM\default.xml C:\Program Files\Macrogaming\SweetIM\mgAdaptersProxy.dll C:\Program Files\Macrogaming\SweetIM\mgArchive.dll C:\Program Files\Macrogaming\SweetIM\mgcommon.dll C:\Program Files\Macrogaming\SweetIM\mgcommunication.dll C:\Program Files\Macrogaming\SweetIM\mgconfig.dll C:\Program Files\Macrogaming\SweetIM\mgFlashPlayer.dll C:\Program Files\Macrogaming\SweetIM\mghooking.dll C:\Program Files\Macrogaming\SweetIM\mgIEPlayer.dll C:\Program Files\Macrogaming\SweetIM\mglogger.dll C:\Program Files\Macrogaming\SweetIM\mgMsnAuto.dll C:\Program Files\Macrogaming\SweetIM\mgMsnMessengerAdapter.dll C:\Program Files\Macrogaming\SweetIM\mgMsnProt.dll C:\Program Files\Macrogaming\SweetIM\mgSweetIM.dll C:\Program Files\Macrogaming\SweetIM\mgUpdateSupport.dll C:\Program Files\Macrogaming\SweetIM\mgxml_wrapper.dll C:\Program Files\Macrogaming\SweetIM esources\gdiplus.dll C:\Program Files\Macrogaming\SweetIM esources\ImageOle.dll C:\Program Files\Macrogaming\SweetIM\SweetIM.exe C:\Program Files\Macrogaming\SweetIM\update\lastversioninfo.xml . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BOONTY_GAMES -------\Service_Boonty Games ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-09 to 2008-07-09 )))))))))))))))))))))))))))))))))))) . 2008-07-09 20:00 . 2008-07-07 17:35 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-07-09 19:59 . 2008-07-09 20:00 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-07-09 19:59 . 2008-07-09 19:59 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-07-09 19:59 . 2008-07-07 17:35 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-07-09 19:50 . 2008-07-09 19:50 d-------- C:\Program Files\Trend Micro 2008-07-09 10:36 . 2008-07-09 10:36 268 --ah----- C:\sqmdata17.sqm 2008-07-09 10:36 . 2008-07-09 10:36 244 --ah----- C:\sqmnoopt17.sqm 2008-07-08 15:36 . 2008-07-08 15:37 d-------- C:\WINDOWS\system32\NtmsData 2008-07-03 17:10 . 2008-07-03 17:11 d-------- C:\Program Files\eMule . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-09 21:30 --------- d-----w C:\Program Files\Wanadoo 2008-07-09 20:39 --------- d-----w C:\Program Files\CFWebAdvancedU 2008-07-07 07:41 5,852 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys 2008-07-02 10:59 --------- d-----w C:\Program Files\VideoLAN 2008-06-07 16:31 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-03-03 13:04 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat 2007-10-17 23:18 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe 2007-02-26 01:03 1,140,304 -c--a-w C:\Documents and Settings\All Users\Application Data\pswi_preloaded.exe 2005-08-27 11:30 5,065 ----a-w C:\WINDOWS\inf\SETD.tmp 2007-06-09 09:41 248 --sh--r C:\WINDOWS\system32\31F674FCA2.sys 2007-08-30 21:48 9,104 --sh--r C:\WINDOWS\system32\msivs10.dll 2007-08-30 21:46 9,104 --sh--r C:\WINDOWS\system32\msivsvt.dll . ((((((((((((((((((((((((((((( snapshot@2008-07-09_22.48.47,87 ))))))))))))))))))))))))))))))))))))))))) . - 2008-07-09 19:49:44 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-07-09 21:27:46 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360] "MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [2001-07-25 11:00 192568] "WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 15:50 122880] "TVAgent WiFi"="C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe" [2005-04-12 17:44 905216] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CmCardRun"="C:\WINDOWS\system32\CmWatch.exe" [2003-09-16 11:50 229376] "MoneyStartUp10.0"="C:\Program Files\Microsoft Money\System\Activation.exe" [2001-07-25 11:00 245810] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2005-01-12 15:54 241664] "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-17 00:11 49152] "Corel Photo Downloader"="C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe" [2006-10-31 12:10 478800] "ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2005-02-16 16:15 221184] "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-02-16 16:15 81920] "SMSystemAnalyzer"="C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe" [2007-10-03 10:05 819560] "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 15:49 20480] "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 17:55 32768] "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 11:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe] [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\MSN Messenger\msnmsgr.exe"= "C:\Program Files\MSN Messenger\livecall.exe"= "C:\Program Files\Wanadoo\WOOBrowser\WOOBrowser.exe"= "C:\Program Files\Mozilla Firefox\firefox.exe"= "C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe"= "C:\Program Files\eMule\eMule.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16] R3 rtl8180;Realtek RTL8180 Wireless LAN (Mini-)PCI NIC NT Driver;C:\WINDOWS\system32\DRIVERS\RTL8180.SYS [2003-12-04 04:10] R3 SCREAMINGBDRIVER;Screaming Bee Audio;C:\WINDOWS\system32\drivers\ScreamingBAudio.sys [2006-09-27 00:21] R3 UMSSSTOR;C-Media Storage;C:\WINDOWS\system32\DRIVERS\UMSS.SYS [2003-09-16 08:48] S1 lusbaudio;Microphone USB Logitech;C:\WINDOWS\system32\drivers\OVSound2.sys [2001-08-17 22:05] S3 QCAbsee;QuickCam Web Logitech (0801);C:\WINDOWS\system32\DRIVERS\OVCA.sys [2001-08-17 22:05] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c0b72d8-7346-11dc-bded-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c0b72d9-7346-11dc-bded-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2d1d6e2c-7e7d-11dc-be06-d1742e29724a}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{707eac62-7a3b-11dc-be00-cf80e5dbcf51}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{91b8a5be-c76f-11db-bc24-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae3b7915-c800-11db-bc27-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe *Newly Created Service* - PCANDIS5 . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-07-09 21:16:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"

housmous · Answer

ComboFix 08-07-08.9 - Propriétaire 2008-07-09 23:22:57.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.204 [GMT 2:00] Endroit: C:\Documents and Settings\Propriétaire\Bureau\combofix.exe Command switches used :: C:\Documents and Settings\Propriétaire\Bureau\CFScript.txt..txt * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] FILE :: C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe C:\Program Files\Macrogaming\SweetIM\SweetIM.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\Fichiers communs\BOONTY Shared C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe C:\Program Files\Macrogaming C:\Program Files\Macrogaming\SweetIM\conf\adapter.xml C:\Program Files\Macrogaming\SweetIM\conf\logger.xml C:\Program Files\Macrogaming\SweetIM\conf\messages.xml C:\Program Files\Macrogaming\SweetIM\conf\sweetim.xml C:\Program Files\Macrogaming\SweetIM\conf\sweetimapp.xml C:\Program Files\Macrogaming\SweetIM\conf\users\adil.h@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\adil.h@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\lastuse_Audibles.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\lastuse_SoundFX.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\lastuse_SpecialFX.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\lastuse_Winks.xml C:\Program Files\Macrogaming\SweetIM\conf\users\akro.13@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\angedemonpkpas@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\angedemonpkpas@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\anna_fhal@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\anna_fhal@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\armand.bour@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\armand.bour@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\babyboy13010@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\babyboy13010@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\bibise94@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\bibise94@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\billy703@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\billy703@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\celine_fhal@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\celine_fhal@hotmail.com\lastuse_SoundFX.xml C:\Program Files\Macrogaming\SweetIM\conf\users\celine_fhal@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\celine21mars@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\celine21mars@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\double_face13@msn.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\double_face13@msn.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoferock@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoferock@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoph01@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoph01@hotmail.fr\lastuse_SoundFX.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoph01@hotmail.fr\lastuse_SpecialFX.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoph01@hotmail.fr\lastuse_Winks.xml C:\Program Files\Macrogaming\SweetIM\conf\users\etoph01@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\fmahalma@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\fmahalma@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\gabi2205@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\gabi2205@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\hypnose003@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\hypnose003@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\jamel-dine@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\jamel-dine@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\komando-fada@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\komando-fada@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\komando_13@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\komando_13@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lescelines@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lescelines@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lindab10@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lindab10@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lindab25@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\lindab25@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\main_user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mohlies@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mohlies@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mymybilly@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mymybilly@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mynoucha@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\mynoucha@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users enflo0013@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users enflo0013@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users onald_0@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users onald_0@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\samsebavie@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\samsebavie@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\sebastienbour@msn.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\sebastienbour@msn.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\shnaider81@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\shnaider81@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\simplysimple@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\simplysimple@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\sss_zeralda_love@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\sss_zeralda_love@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users hegunners13@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users hegunners13@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users itanic@coeur.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users itanic@coeur.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users iti_120@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users iti_120@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\w-116@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\w-116@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\w-16@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\w-16@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\yayelle@hotmail.fr\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\yayelle@hotmail.fr\user_config.xml C:\Program Files\Macrogaming\SweetIM\conf\users\zeralda-bilel-zeralda@hotmail.com\emoticons_shortcut.xml C:\Program Files\Macrogaming\SweetIM\conf\users\zeralda-bilel-zeralda@hotmail.com\user_config.xml C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100AA.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100AB.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100AC.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100AE.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100B3.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100B6.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100B7.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100C5.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100C8.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100D1.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100D2.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100D5.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100D8.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100DF.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100E8.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100FA.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100FD.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000100FE.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010104.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010105.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010106.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010108.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010109.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001010A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010121.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010122.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010123.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010124.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010814.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001081A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001081C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010840.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010841.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010846.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010847.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010848.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001084A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001084B.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001084C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001084D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010850.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010857.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010859.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001085D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001085E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010861.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001088D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001088F.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010893.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010896.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00010897.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001089B.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001089C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0001089D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108A7.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108AA.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108AB.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108AD.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108BE.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000108C2.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002006C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002006D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002006E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020075.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020077.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020079.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002007A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002007D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000200A9.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000200BF.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000200C0.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000200C1.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000200ED.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002010E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020119.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002013F.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020144.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00020185.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0002018E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000201C7.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030001.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030005.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030007.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030011.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030013.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030019.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0003001B.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0003001D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030040.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00030045.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0003005F.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040015.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004001C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004001E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004001F.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040021.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040022.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040024.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040025.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004002A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004002B.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004002C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040039.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004003C.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040047.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004004A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004005A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004005F.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040061.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040063.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040067.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004006B.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0004006E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040073.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040078.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00040083.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000400A3.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000400AC.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000400C3.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000400C4.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00050001.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00050002.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00050004.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00050005.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\00060024.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0006006A.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0006007D.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\0006007E.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000600A7.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\000600DD.dat C:\Program Files\Macrogaming\SweetIM\data\contentdb\cache_indx.dat C:\Program Files\Macrogaming\SweetIM\default.xml C:\Program Files\Macrogaming\SweetIM\mgAdaptersProxy.dll C:\Program Files\Macrogaming\SweetIM\mgArchive.dll C:\Program Files\Macrogaming\SweetIM\mgcommon.dll C:\Program Files\Macrogaming\SweetIM\mgcommunication.dll C:\Program Files\Macrogaming\SweetIM\mgconfig.dll C:\Program Files\Macrogaming\SweetIM\mgFlashPlayer.dll C:\Program Files\Macrogaming\SweetIM\mghooking.dll C:\Program Files\Macrogaming\SweetIM\mgIEPlayer.dll C:\Program Files\Macrogaming\SweetIM\mglogger.dll C:\Program Files\Macrogaming\SweetIM\mgMsnAuto.dll C:\Program Files\Macrogaming\SweetIM\mgMsnMessengerAdapter.dll C:\Program Files\Macrogaming\SweetIM\mgMsnProt.dll C:\Program Files\Macrogaming\SweetIM\mgSweetIM.dll C:\Program Files\Macrogaming\SweetIM\mgUpdateSupport.dll C:\Program Files\Macrogaming\SweetIM\mgxml_wrapper.dll C:\Program Files\Macrogaming\SweetIM esources\gdiplus.dll C:\Program Files\Macrogaming\SweetIM esources\ImageOle.dll C:\Program Files\Macrogaming\SweetIM\SweetIM.exe C:\Program Files\Macrogaming\SweetIM\update\lastversioninfo.xml . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BOONTY_GAMES -------\Service_Boonty Games ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-09 to 2008-07-09 )))))))))))))))))))))))))))))))))))) . 2008-07-09 20:00 . 2008-07-07 17:35 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-07-09 19:59 . 2008-07-09 20:00 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-07-09 19:59 . 2008-07-09 19:59 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-07-09 19:59 . 2008-07-07 17:35 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-07-09 19:50 . 2008-07-09 19:50 d-------- C:\Program Files\Trend Micro 2008-07-09 10:36 . 2008-07-09 10:36 268 --ah----- C:\sqmdata17.sqm 2008-07-09 10:36 . 2008-07-09 10:36 244 --ah----- C:\sqmnoopt17.sqm 2008-07-08 15:36 . 2008-07-08 15:37 d-------- C:\WINDOWS\system32\NtmsData 2008-07-03 17:10 . 2008-07-03 17:11 d-------- C:\Program Files\eMule . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-09 21:30 --------- d-----w C:\Program Files\Wanadoo 2008-07-09 20:39 --------- d-----w C:\Program Files\CFWebAdvancedU 2008-07-07 07:41 5,852 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys 2008-07-02 10:59 --------- d-----w C:\Program Files\VideoLAN 2008-06-07 16:31 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-03-03 13:04 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat 2007-10-17 23:18 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe 2007-02-26 01:03 1,140,304 -c--a-w C:\Documents and Settings\All Users\Application Data\pswi_preloaded.exe 2005-08-27 11:30 5,065 ----a-w C:\WINDOWS\inf\SETD.tmp 2007-06-09 09:41 248 --sh--r C:\WINDOWS\system32\31F674FCA2.sys 2007-08-30 21:48 9,104 --sh--r C:\WINDOWS\system32\msivs10.dll 2007-08-30 21:46 9,104 --sh--r C:\WINDOWS\system32\msivsvt.dll . ((((((((((((((((((((((((((((( snapshot@2008-07-09_22.48.47,87 ))))))))))))))))))))))))))))))))))))))))) . - 2008-07-09 19:49:44 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-07-09 21:27:46 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360] "MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [2001-07-25 11:00 192568] "WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 15:50 122880] "TVAgent WiFi"="C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe" [2005-04-12 17:44 905216] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CmCardRun"="C:\WINDOWS\system32\CmWatch.exe" [2003-09-16 11:50 229376] "MoneyStartUp10.0"="C:\Program Files\Microsoft Money\System\Activation.exe" [2001-07-25 11:00 245810] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2005-01-12 15:54 241664] "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-17 00:11 49152] "Corel Photo Downloader"="C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe" [2006-10-31 12:10 478800] "ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2005-02-16 16:15 221184] "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-02-16 16:15 81920] "SMSystemAnalyzer"="C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe" [2007-10-03 10:05 819560] "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 15:49 20480] "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 17:55 32768] "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 11:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe] [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\MSN Messenger\msnmsgr.exe"= "C:\Program Files\MSN Messenger\livecall.exe"= "C:\Program Files\Wanadoo\WOOBrowser\WOOBrowser.exe"= "C:\Program Files\Mozilla Firefox\firefox.exe"= "C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe"= "C:\Program Files\eMule\eMule.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16] R3 rtl8180;Realtek RTL8180 Wireless LAN (Mini-)PCI NIC NT Driver;C:\WINDOWS\system32\DRIVERS\RTL8180.SYS [2003-12-04 04:10] R3 SCREAMINGBDRIVER;Screaming Bee Audio;C:\WINDOWS\system32\drivers\ScreamingBAudio.sys [2006-09-27 00:21] R3 UMSSSTOR;C-Media Storage;C:\WINDOWS\system32\DRIVERS\UMSS.SYS [2003-09-16 08:48] S1 lusbaudio;Microphone USB Logitech;C:\WINDOWS\system32\drivers\OVSound2.sys [2001-08-17 22:05] S3 QCAbsee;QuickCam Web Logitech (0801);C:\WINDOWS\system32\DRIVERS\OVCA.sys [2001-08-17 22:05] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c0b72d8-7346-11dc-bded-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c0b72d9-7346-11dc-bded-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2d1d6e2c-7e7d-11dc-be06-d1742e29724a}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{707eac62-7a3b-11dc-be00-cf80e5dbcf51}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{91b8a5be-c76f-11db-bc24-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae3b7915-c800-11db-bc27-000272430670}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe *Newly Created Service* - PCANDIS5 . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-07-09 21:16:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"

Utilisateur anonyme · Answer

Combofix a trouvé du navipromo on va verifier ça 

réouvre hijackthis
fais scan only
coche cette ligne :

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') 


et clic sur fix checked

ensuite :

Fais un clic droit sur ce lien : (IL-MAFIOSO) 
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 
Ensuite double clique sur navilog1.exe pour lancer l'installation. 
Une fois l'installation terminée, le fix s'exécutera automatiquement. 
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). 

Laisse-toi guider. Au menu principal, choisis 1 et valides. 
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord) 

Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche comme demandé, le blocnote va s'ouvrir. 
Copie-colle l'intégralité dans une réponse. Referme le blocnote. 
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Utilisateur anonyme · Answer

Double cliques sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider. 
Au menu principal, choisis 2 et valides. 
(ne fais pas le choix 3 ou 4 sans notre avis/accord) 

Le fix va t'informer qu'il va alors redémarrer ton PC 
Fermes toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts 
Appuies sur une touche comme demandé. 
(si ton Pc ne redémarre pas automatiquement, fais le toi même) 
Au redémarrage de ton PC, choisis ta session habituelle. 

Patiente jusqu'au message : 
*** Nettoyage Termine le ..... *** 
Le bloc-notes va s'ouvrir. 
Sauvegarde le rapport de manière à le retrouver 
Referme le bloc-notes. Ton bureau va réapparaitre 

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches. 
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter" 
Tape explorer et valide. Celà te fera apparaitre ton bureau. 

Postes le rapport içi.

Utilisateur anonyme · Answer

pour le pc ça va laisse le tranquille pour ce soir on finira demain pas de soucis

housmous · Answer

bjr t la chiquitine??

housmous · Answer

Clean Navipromo version 3.6.0 commencé le 2008-07-10 à 12:21:24.64

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Propriétaire" 

Mise à jour le 27.06.2008 à 23h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Mode suppression automatique 
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur

 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" * 



*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Propriétaire\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Propriétaire\menudm~1\progra~1" *** 



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Propri‚taire\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" * 


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group supprimé !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 2008-07-10 à 12:25:35.20 ***

007 · Answer

tout ça pour desinstaller ce spy?

Utilisateur anonyme · Answer

salut

comment va le pc ??

refais un scan hijackthis et post le rapport stp ensuite on termine

housmous · Answer

ah dsl jai pa vu que vous vous etes connécter
le pc va bocouuuuuuuuuuuuuuuuuuuuu mieu je costate je fai le scan et je vous lenvoi

housmous · Answer

le seul problém c que je ne saie pas commen fair ce scan la personne qu'etez avec vous hier n'est plus la pouré vous mindiquer svp

Utilisateur anonyme · Answer

ouvre hijackthis

clic sur do a system scan and save a logfile

puis copie colle le rapport du bloc note stp

housmous · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:02, on 2008-07-10
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\CmWatch.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [CmCardRun] C:\WINDOWS\system32\CmWatch.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Assistant de connexion WiFi\Wizard\Agent_WiFi.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

Utilisateur anonyme · Answer

ok c est clean , on termine :

-> Télécharge Ccleaner (n'installe pas la barre d'outil Yahoo): 

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

-> L´installer. 

-> Une fois installé et lancé : 

Dans la colonne de gauche, click sur : 

->"registre" : 

Coches toutes les cases sous"l´integrité du registre", puis click en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs", tu auras un message pour sauvegarder ta base de registre, tu click "oui" puis tu recommence jusqu'à ce qu'il ne trouve plus rien. 

ps : les sauvegardes que tu auras faites, pourront etre supprimées ulterieurement si tout va bien. 

->"nettoyeur" 

quitte ton navigateur avant de le lancer, dans les propriétés du nettoyeur de l´onglet "windows" et "applications"décoche la derniere case (Avancé si elle est cochée) puis click sur "lancer le nettoyage" qunand il aura terminé le scan click en bas a droite sur "lancer le nettoyage" et accepte par oui. 

-> Tutoriel en image : 

https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php 


ensuite :

Télecharge et instal AVG anti spyware:

http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware


instal le et met le a jours

ensuite lance le scan et supprime

puis poste le rapport sur le forum stp



ensuite :


regarde ceci concernant avast : 

antivir vs avast : 

-> http://forum.malekal.com/ftopic3528.php 

alors je te conseille de le desinstaller et d´installer antivir a la place 

Telecharge et instales l'antivirus Antivir Personal Edition Classic : 

->https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/13198.html

tuto : http://www.swl1f.net/viewtopic.php?f=14&t=59 


Pour désinstaller Avast telecharge cet outil

https://www.avast.com/fr-fr/uninstall-utility


ensuite tu n as pas de parefeu :


pare-feu gratuits 


télécharger la version gratuite de Zone alarm 
https://www.pcastuces.com/logitheque/zonealarm.htm 
TUTO 
http://securite-facile.ovh.org/zonealarm.php 
http://forum.telecharger.01net.com/forum/ 


ou 

télécharger la version gratuite de Kerio 
Kerio (parefeu) 
https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html 
TUTO 
https://kerio.probb.fr/ 
SITE de Kerio 
https://kerio.probb.fr/ 

ou 

ComodoFirewallPro 2.4 téléchargement 
http://www.personalfirewall.comodo.com/ 
Tuto pour la 2.4 
https://infomars.fr/forum/index.php?s=908072e48ff7cf0359366440cb26c93f&showtopic=389 
Tuto pour la 2.4 
http://www.nordicnature.net/tutorials/comodo/cf24wiz.htm 
Attention la 3.0 est en anglais uniquement et est plus difficile a paramétrer 
Tuto pour la 3.0 
https://infomars.fr/forum/index.php?showtopic=1225 

ou

OnlineArmor : 
téléchargement:https://www.commentcamarche.net/telecharger/ 34055356 online armor personal firewall 

tutoriels:https://forum.pcastuces.com/sujet.asp?f=25&s=35606 
:https://www.malekal.com/tutorial-online-armor-free/ 



A lire :

https://www.commentcamarche.net/contents/992-firewall-pare-feu



ensuite pour finir :


* pour supprimer les outils/fix utilisés : 

Télécharge ToolsCleaner sur ton bureau. 
--> 
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

# Clique sur Recherche et laisse le scan agir ... 
# Clique sur Suppression pour finaliser. 
# Tu peux, si tu le souhaites, te servir des Options facultatives. 
# Clique sur Quitter pour obtenir le rapport. 
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 

et :


Clic sur "démarrer", cliques droit sur "poste de travail", "propriétés", onglet "restauration du système" 

¤ coche la case "désactiver la Restauration du systéme sur tous les lecteurs", puis clic sur "appliquer" 
¤ décoche la case et clic sur "appliquer" puis "ok". 

Maintenant, que l'ont à effacés les point infectés, nous allons créer un point propre: 

Clic sur "démarrer", "tous les programmes", "accessoires", "outils système", "restauration du système", choisis "créer un point de restauration" nommes le " ccm" par exemple, cliques sur "créer" puis "ok". 
Voilà, maintenant le point de restauration est créé. Si un jour tu décides tu pourras revenir en arrière à la date créée. 


Tuto : http://service1.symantec.com/

housmous · Answer

-->- Recherche: 

C:\Qoobox: trouvé !
C:\Documents and Settings\All Users\Bureau\Navilog1.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\Propriétaire\Recent\HijackThis.lnk: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users\Bureau\Navilog1.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Documents and Settings\Propriétaire\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe: supprimé !
C:\Documents and Settings\Propriétaire\Bureau\HJTInstall.exe: supprimé !
C:\Documents and Settings\Propriétaire\Recent\HijackThis.lnk: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Qoobox: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

housmous · Answer

dsl du retard jai eu uelque empéchemen voila le dernier raport 
et dsl de metre trempé dans le raport d'avan lol

housmous · Answer

voila j'ai fini l'ordi ce comporte parfétemen bien et cela grasse a vous je vous en remercie de cette gentillesse et cette aide gratuite que vous aporté au gents, c tres noble.
merci pour tous
 a la prochaine infectation lol.

Utilisateur anonyme · Answer

de rien pas de soucis

si tu peux mettre résolu ...

Désistaller antivirus 2008 - Page 3

Discussions similaires

Newsletters