Infecté par YahooFatalMan

laguepe -  
j'ai un problème avec mon ordinateur. Il plante tout le temps et parfois même, il redemarre tout seul. après le redemarrage un message d'erreur s'affiche sur un écran bleu avec des codes d'erreurs. On me dit que c'est le virus YahooFatalMan qui est à l'origine de ces problèmes. Je ne sais plus comment faire.

Aidez Moi!!
--
Yan Laguepe

4 réponses

  1.  green day Modérateur
    re

    Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :

    ( toutes les 016)

    O16 - DPF: Casa 3rdPty - jHelp - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casahelp.cab
    O16 - DPF: Casa 3rdPty - Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casathrdpty.cab
    O16 - DPF: Casa 3rdPty - Swing 1 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing1.cab
    O16 - DPF: Casa 3rdPty - Swing 2 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing2.cab
    O16 - DPF: Casa Access Profile - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaccprofmaint.cab
    O16 - DPF: Casa Audit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaudit.cab
    O16 - DPF: Casa AWT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaawt.cab
    O16 - DPF: Casa Broadcast - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabrdcast.cab
    O16 - DPF: Casa BTR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabtr.cab
    O16 - DPF: Casa Cab Verifier - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacabverifier.cab
    O16 - DPF: Casa CBServiceOps - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacbserviceops.cab
    O16 - DPF: Casa Citi-Netting - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casanetting.cab
    O16 - DPF: Casa CitiWithin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacitiwithin.cab
    O16 - DPF: Casa Client Association - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntassoc.cab
    O16 - DPF: Casa Client Def - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntdef.cab
    O16 - DPF: Casa Code Pages - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacodepage.cab
    O16 - DPF: Casa CollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacollitems.cab
    O16 - DPF: Casa CustomReport - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacustomreport.cab
    O16 - DPF: Casa Default - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadefault.cab
    O16 - DPF: Casa DtvmrmInvestments - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadtvmrm.cab
    O16 - DPF: Casa ELC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaelc.cab
    O16 - DPF: Casa Fidelity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidelity.cab
    O16 - DPF: Casa File Delivery - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafiledelivery.cab
    O16 - DPF: Casa File Import - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafileimport.cab
    O16 - DPF: Casa Flow Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaflowmaint.cab
    O16 - DPF: Casa Framework - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaframework.cab
    O16 - DPF: Casa Global Trade Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradecommon.cab
    O16 - DPF: Casa Global Trade Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradedetail.cab
    O16 - DPF: Casa Global Trade Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradelib.cab
    O16 - DPF: Casa Global Trade PI - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradepi.cab
    O16 - DPF: Casa Global Trade Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradesummary.cab
    O16 - DPF: Casa IBM XML Parser - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaxml.cab
    O16 - DPF: Casa ILC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casailc.cab
    O16 - DPF: Casa Images - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaimages.cab
    O16 - DPF: Casa Infrastructure - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casainfr.cab
    O16 - DPF: Casa JPIPreLoader - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casajpipreloader.cab
    O16 - DPF: Casa Language ar_EG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ar_eg.cab
    O16 - DPF: Casa Language bg_BG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_bg_bg.cab
    O16 - DPF: Casa Language cs_CZ - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_cs_cz.cab
    O16 - DPF: Casa Language de_DE - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_de_de.cab
    O16 - DPF: Casa Language el_GR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_el_gr.cab
    O16 - DPF: Casa Language es_AR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_ar.cab
    O16 - DPF: Casa Language es_ES - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_es.cab
    O16 - DPF: Casa Language fr_FR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_fr_fr.cab
    O16 - DPF: Casa Language he_IL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_he_il.cab
    O16 - DPF: Casa Language hu_HU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_hu_hu.cab
    O16 - DPF: Casa Language it_IT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_it_it.cab
    O16 - DPF: Casa Language ja_JP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ja_jp.cab
    O16 - DPF: Casa Language ko_KP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ko_kp.cab
    O16 - DPF: Casa Language nl_NL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_nl_nl.cab
    O16 - DPF: Casa Language pl_PL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pl_pl.cab
    O16 - DPF: Casa Language pt_BR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pt_br.cab
    O16 - DPF: Casa Language ro_RO - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ro_ro.cab
    O16 - DPF: Casa Language ru_RU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ru_ru.cab
    O16 - DPF: Casa Language sk_SK - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_sk_sk.cab
    O16 - DPF: Casa Language th_TH - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_th_th.cab
    O16 - DPF: Casa Language tr_TR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_tr_tr.cab
    O16 - DPF: Casa Language zh_CN - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_cn.cab
    O16 - DPF: Casa Language zh_TW - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_tw.cab
    O16 - DPF: Casa Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalibs.cab
    O16 - DPF: Casa Liquidity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaliquidity.cab
    O16 - DPF: Casa List Manager - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalistmgr.cab
    O16 - DPF: Casa Lockbox - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalockbox.cab
    O16 - DPF: Casa Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casamisc.cab
    O16 - DPF: Casa Payments Banamex - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsbanamex.cab
    O16 - DPF: Casa Payments Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtscomm.cab
    O16 - DPF: Casa Payments Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsdtl.cab
    O16 - DPF: Casa Payments Disbursements - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadisbursements.cab
    O16 - DPF: Casa Payments Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtslibs.cab
    O16 - DPF: Casa Payments Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsmisc.cab
    O16 - DPF: Casa Pref Mgr - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaprefmgr.cab
    O16 - DPF: Casa Receivables Mandates - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesmandates.cab
    O16 - DPF: Casa ReceivablesDirectDebit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesdirectdebit.cab
    O16 - DPF: Casa ReceivablesInquiries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesinquiries.cab
    O16 - DPF: Casa Report - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareport.cab
    O16 - DPF: Casa Safeword - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasafeword.cab
    O16 - DPF: Casa SDR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasdr.cab
    O16 - DPF: Casa Security Admin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasecurityadmin.cab
    O16 - DPF: Casa ServForCollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforcollitems.cab
    O16 - DPF: Casa Taiwan CBR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casatwcbr.cab
    O16 - DPF: Casa Trade FI Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaficommon.cab
    O16 - DPF: Casa Trade FI Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidetail.cab
    O16 - DPF: Casa Trade FI Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafilib.cab
    O16 - DPF: Casa Trade FI Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafisummary.cab
    O16 - DPF: Casa User Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casausrmaint.cab
    O16 - DPF: CasaReceivablesServices - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesservices.cab
    O16 - DPF: CasaServForProducts - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforproducts.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_sit...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
    O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaverifier.cab

    *Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs .

    *Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle
    est cochée) puis clique sur "lancer le nettoyage"

    https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

    tuto: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

    ensuite fais le 1/ et 2/ de ce lien stp :

    virus methode preliminaire de desinfection version fr

    ++

    **tout ce que je sais, c'est que je ne sais rien ! et c'est déjà pas mal ...**
    0
    1. laguepe Auteur
      Voici le rapport que j'ai eu
      il est long, mais j'espère que vous en ferez bonne usage!
      Merci.
      Logfile of HijackThis v1.99.1
      Scan saved at 15:04:25, on 31/08/2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\MS\SMS\CORE\BIN\CLISVCL.EXE
      C:\WINDOWS\SYSTEM32\DWRCS.EXE
      C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\MS\SMS\CLICOMP\RemCtrl\Wuser32.exe
      C:\WINDOWS\SYSTEM32\DWRCST.exe
      C:\WINDOWS\system32\igfxtray.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\WINDOWS\MS\SMS\CORE\BIN\LAUNCH32.EXE
      C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\system32\ctfmon.exe
      D:\Yanick\Programmes\SuperCopier2\SuperCopier2.exe
      C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\MS\SMS\clicomp\apa\Bin\smsapm32.exe
      C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
      C:\WINDOWS\MS\SMS\clicomp\SWMeter\SMAgntNT.EXE
      D:\RsFault\RsFaults.exe
      C:\Program Files\Windows Media Player\wmplayer.exe
      D:\Yanick\FlashGet\flashget.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
      C:\Downloads\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mtncameroon.net
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Yanick\FlashGet\jccatch.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\Yanick\FlashGet\fgiebar.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [SMS Application Launcher] C:\WINDOWS\MS\SMS\CORE\BIN\LAUNCH32.EXE
      O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
      O4 - HKCU\..\Run: [SuperCopier2.exe] D:\Yanick\Programmes\SuperCopier2\SuperCopier2.exe
      O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
      O8 - Extra context menu item: Download All by FlashGet - D:\Yanick\FlashGet\jc_all.htm
      O8 - Extra context menu item: Download using FlashGet - D:\Yanick\FlashGet\jc_link.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
      O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
      O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Yanick\FlashGet\flashget.exe
      O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Yanick\FlashGet\flashget.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://www.mtncameroon.net
      O16 - DPF: Casa 3rdPty - jHelp - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casahelp.cab
      O16 - DPF: Casa 3rdPty - Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casathrdpty.cab
      O16 - DPF: Casa 3rdPty - Swing 1 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing1.cab
      O16 - DPF: Casa 3rdPty - Swing 2 - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaswing2.cab
      O16 - DPF: Casa Access Profile - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaccprofmaint.cab
      O16 - DPF: Casa Audit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaaudit.cab
      O16 - DPF: Casa AWT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaawt.cab
      O16 - DPF: Casa Broadcast - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabrdcast.cab
      O16 - DPF: Casa BTR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casabtr.cab
      O16 - DPF: Casa Cab Verifier - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacabverifier.cab
      O16 - DPF: Casa CBServiceOps - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacbserviceops.cab
      O16 - DPF: Casa Citi-Netting - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casanetting.cab
      O16 - DPF: Casa CitiWithin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacitiwithin.cab
      O16 - DPF: Casa Client Association - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntassoc.cab
      O16 - DPF: Casa Client Def - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaclntdef.cab
      O16 - DPF: Casa Code Pages - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacodepage.cab
      O16 - DPF: Casa CollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacollitems.cab
      O16 - DPF: Casa CustomReport - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casacustomreport.cab
      O16 - DPF: Casa Default - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadefault.cab
      O16 - DPF: Casa DtvmrmInvestments - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadtvmrm.cab
      O16 - DPF: Casa ELC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaelc.cab
      O16 - DPF: Casa Fidelity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidelity.cab
      O16 - DPF: Casa File Delivery - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafiledelivery.cab
      O16 - DPF: Casa File Import - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafileimport.cab
      O16 - DPF: Casa Flow Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaflowmaint.cab
      O16 - DPF: Casa Framework - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaframework.cab
      O16 - DPF: Casa Global Trade Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradecommon.cab
      O16 - DPF: Casa Global Trade Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradedetail.cab
      O16 - DPF: Casa Global Trade Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradelib.cab
      O16 - DPF: Casa Global Trade PI - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradepi.cab
      O16 - DPF: Casa Global Trade Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaglobaltradesummary.cab
      O16 - DPF: Casa IBM XML Parser - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaxml.cab
      O16 - DPF: Casa ILC - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casailc.cab
      O16 - DPF: Casa Images - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaimages.cab
      O16 - DPF: Casa Infrastructure - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casainfr.cab
      O16 - DPF: Casa JPIPreLoader - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casajpipreloader.cab
      O16 - DPF: Casa Language ar_EG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ar_eg.cab
      O16 - DPF: Casa Language bg_BG - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_bg_bg.cab
      O16 - DPF: Casa Language cs_CZ - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_cs_cz.cab
      O16 - DPF: Casa Language de_DE - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_de_de.cab
      O16 - DPF: Casa Language el_GR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_el_gr.cab
      O16 - DPF: Casa Language es_AR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_ar.cab
      O16 - DPF: Casa Language es_ES - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_es_es.cab
      O16 - DPF: Casa Language fr_FR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_fr_fr.cab
      O16 - DPF: Casa Language he_IL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_he_il.cab
      O16 - DPF: Casa Language hu_HU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_hu_hu.cab
      O16 - DPF: Casa Language it_IT - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_it_it.cab
      O16 - DPF: Casa Language ja_JP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ja_jp.cab
      O16 - DPF: Casa Language ko_KP - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ko_kp.cab
      O16 - DPF: Casa Language nl_NL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_nl_nl.cab
      O16 - DPF: Casa Language pl_PL - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pl_pl.cab
      O16 - DPF: Casa Language pt_BR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_pt_br.cab
      O16 - DPF: Casa Language ro_RO - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ro_ro.cab
      O16 - DPF: Casa Language ru_RU - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_ru_ru.cab
      O16 - DPF: Casa Language sk_SK - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_sk_sk.cab
      O16 - DPF: Casa Language th_TH - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_th_th.cab
      O16 - DPF: Casa Language tr_TR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_tr_tr.cab
      O16 - DPF: Casa Language zh_CN - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_cn.cab
      O16 - DPF: Casa Language zh_TW - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casa_zh_tw.cab
      O16 - DPF: Casa Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalibs.cab
      O16 - DPF: Casa Liquidity - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaliquidity.cab
      O16 - DPF: Casa List Manager - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalistmgr.cab
      O16 - DPF: Casa Lockbox - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casalockbox.cab
      O16 - DPF: Casa Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casamisc.cab
      O16 - DPF: Casa Payments Banamex - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsbanamex.cab
      O16 - DPF: Casa Payments Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtscomm.cab
      O16 - DPF: Casa Payments Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsdtl.cab
      O16 - DPF: Casa Payments Disbursements - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casadisbursements.cab
      O16 - DPF: Casa Payments Libraries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtslibs.cab
      O16 - DPF: Casa Payments Misc - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casapmtsmisc.cab
      O16 - DPF: Casa Pref Mgr - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaprefmgr.cab
      O16 - DPF: Casa Receivables Mandates - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesmandates.cab
      O16 - DPF: Casa ReceivablesDirectDebit - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesdirectdebit.cab
      O16 - DPF: Casa ReceivablesInquiries - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesinquiries.cab
      O16 - DPF: Casa Report - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareport.cab
      O16 - DPF: Casa Safeword - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasafeword.cab
      O16 - DPF: Casa SDR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasdr.cab
      O16 - DPF: Casa Security Admin - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casasecurityadmin.cab
      O16 - DPF: Casa ServForCollItems - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforcollitems.cab
      O16 - DPF: Casa Taiwan CBR - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casatwcbr.cab
      O16 - DPF: Casa Trade FI Common - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaficommon.cab
      O16 - DPF: Casa Trade FI Detail - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafidetail.cab
      O16 - DPF: Casa Trade FI Lib - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafilib.cab
      O16 - DPF: Casa Trade FI Summary - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casafisummary.cab
      O16 - DPF: Casa User Maint - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casausrmaint.cab
      O16 - DPF: CasaReceivablesServices - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casareceivablesservices.cab
      O16 - DPF: CasaServForProducts - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaservforproducts.cab
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_sit...
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
      O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://\\tecdc00\Apps\CITIDIRECT\CitiDirect\ie\casaverifier.cab
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
      O17 - HKLM\Software\..\Telephony: DomainName = corp.mtncameroon.net
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
      O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = corp.mtncameroon.net
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINDOWS\SYSTEM32\DWRCS.EXE
      O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe

      0
      1. laguepe Auteur
        Ok j'y vais de ce pas
        0
        1. green day Modérateur
          Salut

          Télécharge ceci :

          Lien : http://www.infos-du-net.com/telecharger/HijackThis.html

          Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm

          Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.

          ++
          0

          Discussions similaires

          Infecte par un virus
          sapard

          3 réponses
          Mon ordinateur a été infecté par un virus ou
          henry4002

          6 réponses
          infecté par InstantAccess
          mimi22

          22 réponses
          infecté par brontok
          yannick

          27 réponses
          infecté par trojan.generic
          blocage

          29 réponses