[Virus] spy sheriff et "computer is infected&

Bonjour,

- je recois sans arrrets desmessages d'aletres "your computer is infected"
- j'ai une application spy sheriff qui se lance.

j'ai installé le firewall comme indiqué sur le site

Et Voila le rapport de smitfraudfix :

SmitFraudFix v2.131

Rapport fait à 17:08:10,14, 23/12/2006
Executé à partir de C:\Documents and Settings\Propri‚taire\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Propri‚taire

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Propri‚taire\Application Data

C:\Documents and Settings\Propri‚taire\Application Data\Install.dat PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\PROPRI~1\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="http://www.mjm-design.com/MM_preloadImages(%27images/site3_03.gif%27,%27images/site3_19.gif%27,%27images/site3_35.gif%27,%27images/site3_51.gif%27,%27images/site3_67.gif%27,%27images/site3_83.gif%27,%27images/site3_99.gif%27,%27images/site3_115.gif%27,%27images/site3_131.gif%27,%27images/site3_147.gif%27,%27images/site3_287.gif%27,%27images/site3_288.gif%27,%27images/site3_289.gif%27,%27images/site3_290.gif%27,%27images/site3_05.gif%27,%27images/site3_20.gif%27,%27images/site3_36.gif%27,%27images/site3_50.gif%27,%27images/site3_63.gif%27,%27images/site1_196.gif%27,%27images/site1_197.gif%27,%27images/site1_198.gif%27,%27images/site1_199.gif%27"
"SubscribedURL"="http://www.mjm-design.com/MM_preloadImages(%27images/site3_03.gif%27,%27images/site3_19.gif%27,%27images/site3_35.gif%27,%27images/site3_51.gif%27,%27images/site3_67.gif%27,%27images/site3_83.gif%27,%27images/site3_99.gif%27,%27images/site3_115.gif%27,%27images/site3_131.gif%27,%27images/site3_147.gif%27,%27images/site3_287.gif%27,%27images/site3_288.gif%27,%27images/site3_289.gif%27,%27images/site3_290.gif%27,%27images/site3_05.gif%27,%27images/site3_20.gif%27,%27images/site3_36.gif%27,%27images/site3_50.gif%27,%27images/site3_63.gif%27,%27images/site1_196.gif%27,%27images/site1_197.gif%27,%27images/site1_198.gif%27,%27images/site1_199.gif%27"
"FriendlyName"=""

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32

pe386 détecté, utilisez un scanner de Rootkit

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

Si vous pouvez m'aider.... ?
Configuration: Windows XP
Internet Explorer 6.0

21 réponses

  1. Modérateur
    Salut

    ok, dernire petite verification :

    télécharge Gmer pour s'assurer de la non-présence de la bébête "pe386" :
    Télécharger gmer : http://www2.gmer.net/gmer.zip
    Déconnecter le PC d'internet si possible et fermer tous les programmes.
    Décompresser le fichier zip et double-clic sur « gmer.exe »
    IMPORTANT: Si une alerte de l’antivirus apparaît pour le fichier « gmer.sys » ou « gmer.exe », laisser le programme s'exécuter.
    Clic sur l'onglet "rootkit" et clic sur « Scan »
    Lorsque le scan est terminé, clic sur "copy" ; et colle le contenu du rapport ici
    ( peut-être faudra-t-il faire :Ouvrir le bloc-note et clic sur le Menu Edition / Coller
    Le rapport doit alors apparaître. Enregistrer le fichier sur le bureau et copier/coller le contenu ici. )

    ++
    0
    1. Voila donc j'ai fait le trend micro Anti-spyware,
      j'ai fait clean donc normalement il m'a supprimé les fechiers trouvé, par contre cela ne m'a pas donné de rapport....

      Voila quand même le nouveau Hijackthis :

      Logfile of HijackThis v1.99.1
      Scan saved at 12:09:31, on 31/12/2006
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Trend Micro\PC-cillin 9\PCCPFW.exe
      C:\WINDOWS\Explorer.EXE
      C:\windows\system\hpsysdrv.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\WINDOWS\System32\hphmon05.exe
      C:\HP\KBD\KBD.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\PROGRA~1\Wanadoo\CnxMon.exe
      C:\PROGRA~1\MESSAG~1\StartMessager.exe
      C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
      C:\Program Files\Trend Micro\PC-cillin 9\PCCClient.exe
      C:\Program Files\Trend Micro\PC-cillin 9\Pop3trap.exe
      C:\WINDOWS\ALCXMNTR.EXE
      C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
      C:\WINDOWS\System32\HPZipm12.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
      C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
      C:\Program Files\Wanadoo\EspaceWanadoo.exe
      C:\Program Files\Wanadoo\ComComp.exe
      C:\Program Files\Wanadoo\Watch.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\System32\msiexec.exe
      C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\Rar$EX00.156\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
      R3 - URLSearchHook: (no name) - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file)
      O2 - BHO: NavErrRedir Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file)
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
      O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
      O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
      O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
      O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
      O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
      O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
      O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
      O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
      O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 9\pccguide.exe"
      O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 9\PCCClient.exe"
      O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 9\Pop3trap.exe"
      O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY
      O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
      O4 - HKLM\..\Run: [wjcyckvq] C:\WINDOWS\System32\fcufefph.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
      O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
      O4 - Global Startup: Picture Package Menu.lnk = ?
      O4 - Global Startup: Picture Package VCD Maker.lnk = ?
      O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
      O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
      O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
      O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
      O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{5C247B76-A67B-4B02-8817-C4DE80D9BE69}: NameServer = 80.10.246.130 80.10.246.3
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
      O23 - Service: Apache2.2 - Unknown owner - C:\Program Files\Apache Software Foundation\Apache2.2\bin\httpd.exe" -k runservice (file missing)
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: FireDaemon Service: ecure (ecure) - Unknown owner - C:\WINDOWS\Temp\FireDaemon.EXE (file missing)
      O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\System32\msasvc.exe (file missing)
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 9\PCCPFW.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: FireDaemon Service: system (system) - Unknown owner - C:\WINDOWS\Temp\FireDaemon.EXE (file missing)
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      0
      1. Modérateur
        Merci ;-))

        meilleurs voeux à toi aussi ; je te souhaite plein de bonnes choses à toi et tes proches :-)

        ++
        0
        1. Contributeur sécurité
          Salut GreenDay

          Bon W-E
          Bon passage de 2006 à 2007 .
          Avec mes meilleurs vœux.
          Al.
          0
          1. Contributeur sécurité
            Re,

            Du # 13 , oui, fais le.

            Vide aussi la quarantaine de Trend Micro\PC-cillin ( c'est un nid à misère )

            Al.
            0
            1. Modérateur
              'Lu !

              ;-))
              0
          2. Bonjour donc voila les 2 rapports de rustock :

            ************************* Rustock.b-fix -- By ejvindh *************************
            30/12/2006 18:53:41,65

            ******************* Pre-run Status of system *******************

            Rootkit driver PE386 is found. Starting the unload-procedure....

            Rustock.b-ADS attached to the System32-folder:
            :lzx32.sys 69038
            Total size: 69038 bytes.
            Attempting to remove ADS...
            system32: deleted 69038 bytes in 1 streams.

            Looking for Rustock.b-files in the System32-folder:
            No Rustock.b-files found in system32

            ******************* Post-run Status of system *******************

            Rustock.b-driver on the system: NONE!

            Rustock.b-ADS attached to the System32-folder:
            No System32-ADS found.

            Looking for Rustock.b-files in the System32-folder:
            No Rustock.b-files found in system32

            ******************************* End of Logfile ********************************

            Logfile of The Avenger version 1, by Swandog46
            Running from registry key:
            \Registry\Machine\System\CurrentControlSet\Services\wwanrbdk

            *******************

            Script file located at: \??\C:\Documents and Settings\tpinpvgc.txt
            Script file opened successfully.

            Script file read successfully

            Backups directory opened successfully at C:\Avenger

            *******************

            Beginning to process script file:

            Driver PE386 unloaded successfully.
            Program C:\Rustbfix\2run.bat successfully set up to run once on reboot.

            Completed script processing.

            *******************

            Finished! Terminate.

            Et voila le rapport Hijacktis

            Logfile of HijackThis v1.99.1
            Scan saved at 19:07:26, on 30/12/2006
            Platform: Windows XP SP1 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\ZoneLabs\vsmon.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
            C:\WINDOWS\System32\svchost.exe
            C:\windows\system\hpsysdrv.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
            C:\WINDOWS\System32\hphmon05.exe
            C:\HP\KBD\KBD.EXE
            C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
            C:\Program Files\Multimedia Card Reader\shwicon2k.exe
            C:\Program Files\Trend Micro\PC-cillin 9\PCCPFW.exe
            C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
            C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
            C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
            C:\PROGRA~1\Wanadoo\CnxMon.exe
            C:\PROGRA~1\MESSAG~1\StartMessager.exe
            C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
            C:\WINDOWS\System32\HPZipm12.exe
            C:\Program Files\Trend Micro\PC-cillin 9\PCCClient.exe
            C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
            C:\Program Files\Trend Micro\PC-cillin 9\Pop3trap.exe
            C:\WINDOWS\ALCXMNTR.EXE
            C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
            C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
            C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
            C:\Program Files\Messenger\msmsgs.exe
            C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
            C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
            C:\WINDOWS\System32\wuauclt.exe
            C:\WINDOWS\System32\wuauclt.exe
            C:\Program Files\Wanadoo\EspaceWanadoo.exe
            C:\Program Files\Wanadoo\ComComp.exe
            C:\Program Files\Wanadoo\Watch.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\Program Files\WinRAR\WinRAR.exe
            C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\Rar$EX00.313\HijackThis.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
            R3 - URLSearchHook: PerfectNavBHO Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:\PROGRA~1\PERFEC~1\BHO\PERFEC~2.DLL (file missing)
            O2 - BHO: NavErrRedir Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:\PROGRA~1\PERFEC~1\BHO\PERFEC~2.DLL (file missing)
            O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
            O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
            O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
            O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
            O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
            O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
            O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
            O3 - Toolbar: Hotbar - {B195B3B3-8A05-11D3-97A4-0004ACA6948E} - C:\Program Files\Hotbar\Bin\4.6.1.0\HbHostIE.dll (file missing)
            O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
            O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
            O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
            O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
            O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
            O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
            O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
            O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
            O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
            O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
            O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
            O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
            O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
            O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
            O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
            O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
            O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
            O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
            O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
            O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
            O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
            O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
            O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
            O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
            O4 - HKLM\..\Run: [updmgr] C:\Program Files\Common files\updmgr\updmgr.exe
            O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
            O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 9\pccguide.exe"
            O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 9\PCCClient.exe"
            O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 9\Pop3trap.exe"
            O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY
            O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
            O4 - HKLM\..\Run: [wjcyckvq] C:\WINDOWS\System32\fcufefph.exe
            O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
            O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
            O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
            O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
            O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
            O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
            O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
            O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
            O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
            O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
            O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
            O4 - Global Startup: Picture Package Menu.lnk = ?
            O4 - Global Startup: Picture Package VCD Maker.lnk = ?
            O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
            O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
            O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
            O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
            O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
            O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
            O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
            O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
            O16 - DPF: {00000000-0000-0000-0000-000020040000} - http://207.234.185.217/ABoxInst_int5.exe
            O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
            O17 - HKLM\System\CCS\Services\Tcpip\..\{5C247B76-A67B-4B02-8817-C4DE80D9BE69}: NameServer = 80.10.246.1 80.10.246.132
            O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
            O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
            O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
            O23 - Service: Apache2.2 - Unknown owner - C:\Program Files\Apache Software Foundation\Apache2.2\bin\httpd.exe" -k runservice (file missing)
            O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
            O23 - Service: FireDaemon Service: ecure (ecure) - Unknown owner - C:\WINDOWS\Temp\FireDaemon.EXE (file missing)
            O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\System32\msasvc.exe (file missing)
            O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
            O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 9\PCCPFW.exe
            O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
            O23 - Service: FireDaemon Service: system (system) - Unknown owner - C:\WINDOWS\Temp\FireDaemon.EXE (file missing)
            O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

            Dois-je effectuer les étapes de grenn day maintenant ou dois-je faire autre chose ?
            0
            1. Modérateur
              Salut Afi ;-)

              j'allais y venir ;-P

              voulais nettoyé un peu avant ...

              ++
              0
              1. Contributeur sécurité
                Salut GreenDay

                Avec un rootkit du genre pe386, je préfère attaquer celui-ci avant de faire autre chose, et la raison est bien simple : si on ne vire pas cette bête, les autres manips sont inutiles.

                Télécharge ce fichier (par ejvindh)
                http://www.uploads.ejvindh.net/rustbfix.exe
                ...et sauvegarde-le sur ton Bureau.

                Double clique rustbfix.exe afin de lancer l'outil.
                Si une infection Rustock.b est détectée, une invite t'indiquera qu'il est nécessaire de redémarrer l'ordi. Ce redémarrage pourrait être plus long que d'habitude, et il est possible que deux redémarrages soient requis. Tout cela se fera automatiquement.
                Suite au(x) redémarrage(s), deux rapports s'ouvriront : (%root%\avenger.txt & %root%\rustbfix\pelog.txt).
                Poste (Copie/Colle) le contenu de ces deux rapports, ainsi qu'un nouveau log HijackThis dans ta prochaine réponse.

                Et supprimer les "trouvailles" en AVG-AS ( quelle manie de poster des choses pareilles ) .
                C'est à croire que les internautes ne lisent pas les modes opératoires !

                Bonne continuation
                Al.
                0
                1. ok donc voila le rapport que m'a donné AVG,
                  avant de faire le scan en ligne :

                  ---------------------------------------------------------
                  AVG Anti-Spyware - Rapport d'analyse
                  ---------------------------------------------------------

                  + Créé à: 20:48:27 24/12/2006

                  + Résultat de l'analyse:

                  C:\WINDOWS\ABox.exe -> Adware.AdBox : Ignoré.
                  C:\Program Files\Altnet -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\Sigfiles.db -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-1000-0x3bae733757fd8a71a25974064839a50d.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-1000-0x4fb4132a634d2c0a9980b479ff943db3.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1081419130.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1143607533.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1209056169.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1218528728.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1252360980.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1261951039.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1286555454.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1295326891.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1330761819.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1358009906.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1383724525.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1453887058.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1517455649.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1611230363.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1656087371.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1680081111.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1699720447.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-171976623.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1749744151.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1866839521.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1914821633.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1931394334.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1965064970.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-1983796284.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2035996825.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2039215134.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-218117064.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2187068232.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2189454059.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2214550697.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2215526564.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-221964564.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2231045284.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2281039443.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2281964629.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2361037295.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-23844037.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2447216667.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2481599636.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2559118665.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2636950808.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2678418719.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2716852697.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2812773967.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2816777658.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2866886977.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-291562852.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2920238330.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2928578697.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2956649530.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-2970279609.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3055025590.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3077123160.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3113100587.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3122998299.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-312487332.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3145811157.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3168553227.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3210053845.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3248488223.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-337138514.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3381064870.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3392861525.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3590958737.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3597849426.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-360822526.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3633356676.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-36886686.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-370250578.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3746341763.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3810240921.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3854253886.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3865426127.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3883623204.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3898563651.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3920906997.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3944741799.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-3954737185.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-4005971129.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-4047402023.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-4092933500.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-4104785341.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-4110058571.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-4156425336.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-4172691168.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-4249860883.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-439354911.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-458203422.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-513564901.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-540558026.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-54956044.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-550389346.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-554359010.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-562100721.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-590880791.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-702306249.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-73569966.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-782678654.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-800208597.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-831077948.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-10001-875505615.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-1001-512.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-1001-63.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-5001-1056357001.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-5001-1304874135.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-5001-1409775727.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-5001-1941984611.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-5001-2136464225.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-5001-2183149523.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-5001-416490899.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\DBBackup\file-5001-868164468.sig -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\adm.exe -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\adm25.dll -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\adm4.dll -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\admdata.dll -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\admdloader.dll -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\admfdi.dll -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\admprog.dll -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\altnetuninstall.exe -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\asm.exe -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\asmend.exe -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\asmps.dll -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\dminfo2.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\dminfo3.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\dminstall3.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\dmsetup.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\dmsetupbig.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\jsinstall.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\jslegals.txt -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\selectdir.txt -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\selectdir.txt1st -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Download Manager\selectdir1st.txt -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\alz.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\arc.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\arc.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\arj.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\arj.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\bzip2.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\bzip2.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cab.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\ceva_dll.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\ceva_dll.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\ceva_emu.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\ceva_vfs.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cevakrnl.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cevakrnl.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cevakrnl.ivd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cevakrnl.rvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cevakrnl.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cran.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cran.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cran.ivd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cran.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\dbx.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\dbx.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\docfile.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\docfile.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.ivd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\epoc.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\epoc.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\gzip.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\hlp.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\html.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\html.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\iso.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\iso.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\java.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\java.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\jpeg.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\jpeg.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\lha.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mbox.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_97.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_97.ivd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_x95.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mime.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mime.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\na.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\na.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\na.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\nelf.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\nelf.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\nelf.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\nsis.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\pdf.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\pdf.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\plugins.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\plugins.cab.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\pst.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\rar.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\rar.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\rup.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\rup.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\rup.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\sdx.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\sdx.ivd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\sdx.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\sfx.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\sfx.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\tar.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\tar.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\tnef.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.ivd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\update.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\update.txt.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\ve.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\ve.cvd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\ve.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\wise.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\z.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\z.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\zip.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\zip.xmd.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages\altnet.css -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages\gradient.gif -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages\local_firstuse.html -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages\local_points.html -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages\local_redeem.html -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages\local_start.html -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages\local_wallet.html -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages\notconnected.gif -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages\offline.gif -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\LocalPages\pixel.gif -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Points Manager.exe.Manifest -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\Help.xml -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\Sav3BD.tmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\Skin.xml -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\Thumbs.db -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\back-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\back.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\bottom.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\bottomleft.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\bottomright.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\close-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\close.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\forward-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\forward.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\help-bottom.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\help-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\help-sel.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\help-top.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\help-topleft.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\help-topright.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\help.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\left.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\maximise-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\maximise.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\mb_bottom.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\mb_bottomleft.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\mb_bottomright.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\mb_left.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\mb_right.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\mb_top.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\mb_topleft.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\mb_topright.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\message.xml -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\minimise-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\minimise.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\points-disabled.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\points-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\points-sel.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\points.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\redeem-disabled.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\redeem-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\redeem-sel.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\redeem.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\refresh-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\refresh.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\right.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\settings-disabled.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\settings-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\settings-sel.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\settings.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\start-disabled.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\start-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\start-sel.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\start.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\top.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\topleft-pro.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\topleft-reg.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\topleft.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\topright.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\wallet-disabled.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\wallet-over.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\wallet-sel.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Skin\wallet.bmp -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\Temp Internet Shares -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\settings.cab -> Adware.Altnet : Ignoré.
                  C:\Program Files\Altnet\Points Manager\sysdetect.dll -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\DMinfo2.cab -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\DMinfo3.cab -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\Setup.cab -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\Setup.exe -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\adm.exe -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\adm25.dll -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\adm4.dll -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\admdata.dll -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\admdloader.dll -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\admfdi.dll -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\admprog.dll -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\atl.dll -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\dmfiles.cab -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\dminstall3.cab -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\msvcirt.dll -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\mysearch.cab -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\pmexe.cab -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\pmfiles.cab -> Adware.Altnet : Ignoré.
                  C:\WINDOWS\Temp\Altnet\pminstall.cab -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Altnet -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Altnet\ADM -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Altnet\Dashboard -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Altnet\Dashboard\Messages -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Altnet\Dashboard\Settings -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Altnet\Dashboard\Setup -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Altnet\Dashboard\Temp Internet Shares -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Altnet\DownloadManager -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Altnet\LocalFiles -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Altnet\TopSearch -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\ADM.ADM -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\ADM.ADM.1 -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\ADM.ADM\CLSID -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\ADM.ADM\CurVer -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\SigningModule.SigningModule -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\SigningModule.SigningModule.1 -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\SigningModule.SigningModule\CLSID -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\SigningModule.SigningModule\CurVer -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Ignoré.
                  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AltnetDM -> Adware.Altnet : Ignoré.
                  C:\Program Files\Common files\Companion Wizard\WapCHK.dll -> Adware.Companion : Ignoré.
                  C:\Program Files\Common files\Companion Wizard\compwiz.exe -> Adware.Companion : Ignoré.
                  C:\Program Files\Fichiers communs\WinAntiVirus Pro 2006\WapCHK.dll -> Adware.Companion : Ignoré.
                  C:\WINDOWS\system32\AdCache -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_500100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_500500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_500700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_504500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_505700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_506200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_506400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_508300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_508900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_514200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_515900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_517900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_533500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_540600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_544600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_550100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_551800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_552400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_553200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_553600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_557300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_563300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_573400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_574700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_577600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_578800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_579400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_580300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_580500.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_580500.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_581000.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_581000.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_586400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_586400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_586600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_598200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_599600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_599900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_600100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_600700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_601400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_601500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_630700.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_630700.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_630800.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_630800.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_630900.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_630900.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_631100.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_631100.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_639800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_645100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_651500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_659200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_659800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_693200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_731000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_731700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_749400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_1_754000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_508300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_513400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_526300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_532200.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_532200.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_532400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_532400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_533500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_538200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_541300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_544600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_545800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_546100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_551800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_552200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_563300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_582200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_583900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_586400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_586400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_591700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_592200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_595800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_617200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_622300.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_622300.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_627300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_628900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_629500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_645100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_651700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_652800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_663500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_663700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_678100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_679400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_699100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_700500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_702900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_732000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_749400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_769000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_769400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_2_769600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_3_532200.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_3_532200.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_3_532400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_3_532400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_3_749400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_500100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_506400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_515900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_517900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_519900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_530800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_574700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_574900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_602800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_646700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_647500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_651700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_652300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_652800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_0_4_749400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_500100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_500500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_500700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_504500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_505700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_506200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_506400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_508300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_508900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_514200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_515900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_517900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_529400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_533500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_540600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_544600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_550100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_551100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_551800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_552400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_557300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_563300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_573400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_574700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_577600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_578800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_579400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_580300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_580500.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_580500.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_581000.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_581000.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_586400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_586400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_598200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_599900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_600100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_600700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_601400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_601500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_630700.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_630700.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_630800.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_630800.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_630900.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_630900.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_631100.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_631100.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_639800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_645100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_651500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_659200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_659800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_693200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_731000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_731700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_749400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_1_754000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_501100.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_501100.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_503400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_503700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_508300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_513400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_517700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_526300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_532200.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_532200.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_532400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_532400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_533500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_538200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_541300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_544600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_545800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_546100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_551100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_551800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_552200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_561400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_563300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_565300.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_582200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_583900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_586400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_586400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_591700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_592200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_595800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_617200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_622300.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_622300.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_627300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_628900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_629500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_645100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_651700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_652300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_652800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_663500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_663700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_678000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_678100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_678300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_678400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_679400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_695200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_695700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_699100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_700500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_702900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_726300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_727200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_727500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_732000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_749400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_769000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_769400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_2_769600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_532200.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_532200.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_532400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_532400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_568500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_576000.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_576000.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_579100.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_579100.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_586000.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_586000.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_3_749400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_500100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_506400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_511100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_513400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_515100.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_515100.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_515900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_517900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_519900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_530800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_531500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_558900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_574400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_574700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_574900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_602800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_646700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_647300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_647500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_651700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_652300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_652800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_670500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_2_4_749400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_500100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_500500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_500700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_504500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_505700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_506200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_506400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_508300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_508900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_514200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_515900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_517900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_529600.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_529600.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_533500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_540600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_544600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_550100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_551100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_551800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_552400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_553200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_553600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_557300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_563300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_573400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_574700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_577600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_578800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_579400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_580300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_580500.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_580500.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_581000.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_581000.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_586400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_586400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_586600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_598200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_599900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_600100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_600700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_601400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_601500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_630700.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_630700.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_630800.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_630800.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_630900.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_630900.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_631100.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_631100.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_639800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_645100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_651500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_659200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_659800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_693200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_731000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_731700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_749400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_1_754000.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_501100.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_501100.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_508300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_513400.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_526300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_532200.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_532200.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_532400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_532400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_533500.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_538200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_541300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_544600.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_545800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_546100.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_551800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_552200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_563300.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_582200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_583900.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_586400.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_586400.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_591700.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_592200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_595800.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_617200.gif -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_622300.htm -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_622300.swf -> Adware.Cydoor : Ignoré.
                  C:\WINDOWS\system32\AdCache\B_329_3_2_62
                  0
                  1. Modérateur
                    Salut

                    tu peux le posté oui ;-)

                    ++
                    0
                    1. Bonjour et encore joyeux Noël à tous !!

                      j'ai effectué AVG anti-spyware en mode sans echec,
                      le rapport est enorme, vraiment enorme, je ne sais pas si je dois quand même le mettre sur le forum ?

                      Ensuite j'ai effectué le scan en ligne avec BitDefender, et voila le rapport :

                      BitDefender Online Scanner

                      Scan report generated at: Mon, Dec 25, 2006 - 06:37:28

                      Scan path: A:\;C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;K:\;

                      Statistics

                      Time
                      04:53:49

                      Files
                      1526660

                      Folders
                      7197

                      Boot Sectors
                      3

                      Archives
                      33556

                      Packed Files
                      159456

                      Results

                      Identified Viruses
                      15

                      Infected Files
                      35

                      Suspect Files
                      0

                      Warnings
                      0

                      Disinfected
                      0

                      Deleted Files
                      45

                      Engines Info

                      Virus Definitions
                      356957

                      Engine build
                      AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)

                      Scan plugins
                      14

                      Archive plugins
                      38

                      Unpack plugins
                      6

                      E-mail plugins
                      6

                      System plugins
                      1

                      Scan Settings

                      First Action
                      Disinfect

                      Second Action
                      Delete

                      Heuristics
                      Yes

                      Enable Warnings
                      Yes

                      Scanned Extensions
                      *;

                      Exclude Extensions

                      Scan Emails
                      Yes

                      Scan Archives
                      Yes

                      Scan Packed
                      Yes

                      Scan Files
                      Yes

                      Scan Boot
                      Yes

                      Scanned File
                      Status

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>svchost1.exe
                      Infected with: Backdoor.Iroffer.1217.A

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>svchost1.exe
                      Disinfection failed

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>svchost1.exe
                      Deleted

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)
                      Updated

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>system.exe
                      Infected with: Backdoor.Servu.BX

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>system.exe
                      Disinfection failed

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>system.exe
                      Deleted

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)
                      Updated

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>setup.bat
                      Infected with: BAT.Trojan.Zapchast

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>setup.bat
                      Disinfection failed

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>setup.bat
                      Deleted

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)
                      Updated

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>HIDDEN32.EXE
                      Infected with: Virtool.Hiddenrun.B

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>HIDDEN32.EXE
                      Disinfection failed

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)=>HIDDEN32.EXE
                      Deleted

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe=>(ZIP Sfx o)
                      Updated

                      C:\Documents and Settings\Nathalie\Bureau\WinRar 4.1 Pro (with CRACK).exe=>(ZIP Sfx o)=>Filters.exe
                      Update failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 301)=>[Subject: Fw: ][Date: Tue, 8 Jun 2004 18:41:22 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Infected with: Joke.Buttons

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 301)=>[Subject: Fw: ][Date: Tue, 8 Jun 2004 18:41:22 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 301)=>[Subject: Fw: ][Date: Tue, 8 Jun 2004 18:41:22 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 301)=>[Subject: Fw: ][Date: Tue, 8 Jun 2004 18:41:22 +0200]=>(MIME part)=>Fitnessdesdoigts.zip
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 301)=>[Subject: Fw: ][Date: Tue, 8 Jun 2004 18:41:22 +0200]=>(MIME part)
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 301)
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx
                      Update failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 320)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:54:45 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Infected with: Joke.Buttons

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 320)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:54:45 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 320)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:54:45 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 320)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:54:45 +0200]=>(MIME part)=>Fitnessdesdoigts.zip
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 320)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:54:45 +0200]=>(MIME part)
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 320)
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx
                      Update failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 321)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:54:12 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Infected with: Joke.Buttons

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 321)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:54:12 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 321)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:54:12 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 321)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:54:12 +0200]=>(MIME part)=>Fitnessdesdoigts.zip
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 321)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:54:12 +0200]=>(MIME part)
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 321)
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx
                      Update failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 322)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:53:48 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Infected with: Joke.Buttons

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 322)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:53:48 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 322)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:53:48 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 322)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:53:48 +0200]=>(MIME part)=>Fitnessdesdoigts.zip
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 322)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:53:48 +0200]=>(MIME part)
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 322)
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx
                      Update failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 323)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:53:00 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Infected with: Joke.Buttons

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 323)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:53:00 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 323)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:53:00 +0200]=>(MIME part)=>Fitnessdesdoigts.zip=>Fitnessdesdoigts.exe
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 323)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:53:00 +0200]=>(MIME part)=>Fitnessdesdoigts.zip
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 323)=>[Subject: Fw: ][Date: Thu, 27 May 2004 18:53:00 +0200]=>(MIME part)
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx=>(message 323)
                      Updated

                      C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{90C1122E-F06C-49E2-9BA9-7DD5182E07BD}\Microsoft\Outlook Express\Éléments envoyés.dbx
                      Update failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Temp\Répertoire temporaire 1 pour Fitnessdesdoigts.zip\Fitnessdesdoigts.exe
                      Infected with: Joke.Buttons

                      C:\Documents and Settings\Propriétaire\Local Settings\Temp\Répertoire temporaire 1 pour Fitnessdesdoigts.zip\Fitnessdesdoigts.exe
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Temp\Répertoire temporaire 1 pour Fitnessdesdoigts.zip\Fitnessdesdoigts.exe
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\adv631[1].htm
                      Infected with: Generic.JS.Obsq.288CFBED

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\adv631[1].htm
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\adv631[1].htm
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\adv631[2].htm
                      Infected with: Generic.JS.Obsq.288CFBED

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\adv631[2].htm
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\adv631[2].htm
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\adv631[3].htm
                      Infected with: Generic.JS.Obsq.288CFBED

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\adv631[3].htm
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\adv631[3].htm
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\new631[1].htm
                      Infected with: Generic.XPL.ADODB.047CF041

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\new631[1].htm
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\new631[1].htm
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\new631[2].htm
                      Infected with: Generic.XPL.ADODB.047CF041

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\new631[2].htm
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\new631[2].htm
                      Deleted

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\new631[3].htm
                      Infected with: Generic.XPL.ADODB.047CF041

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\new631[3].htm
                      Disinfection failed

                      C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\XJNXVHRW\new631[3].htm
                      Deleted

                      C:\hp\bin\Terminator.exe
                      Infected with: Trojan.Killapp.30208.A

                      C:\hp\bin\Terminator.exe
                      Disinfection failed

                      C:\hp\bin\Terminator.exe
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\116C.tmp=>(Quarantine-4)
                      Infected with: Trojan.Downloader.Keenval.F

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\116C.tmp=>(Quarantine-4)
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\116C.tmp=>(Quarantine-4)
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\116D.tmp=>(Quarantine-4)
                      Infected with: Trojan.Downloader.VB.FT

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\116D.tmp=>(Quarantine-4)
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\116D.tmp=>(Quarantine-4)
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\14.tmp=>(Quarantine-4)
                      Infected with: Backdoor.Iroffer.1217.A

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\14.tmp=>(Quarantine-4)
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\14.tmp=>(Quarantine-4)
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\15.tmp=>(Quarantine-4)
                      Infected with: Backdoor.Iroffer.1217.A

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\15.tmp=>(Quarantine-4)
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\15.tmp=>(Quarantine-4)
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\157A.tmp
                      Infected with: Win32.Netsky.Y@mm.Damaged

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\157A.tmp
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\157A.tmp
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\1F.tmp=>(Quarantine-4)
                      Infected with: Trojan.Downloader.Vb.FT

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\1F.tmp=>(Quarantine-4)
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\1F.tmp=>(Quarantine-4)
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\25.tmp=>(Quarantine-4)
                      Infected with: Trojan.Downloader.Vb.FT

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\25.tmp=>(Quarantine-4)
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\25.tmp=>(Quarantine-4)
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\44.tmp=>(Quarantine-4)
                      Infected with: Trojan.Downloader.Vb.FT

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\44.tmp=>(Quarantine-4)
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\44.tmp=>(Quarantine-4)
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\515.tmp=>(Quarantine-4)
                      Infected with: Backdoor.Iroffer.1217.A

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\515.tmp=>(Quarantine-4)
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\515.tmp=>(Quarantine-4)
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>svchost1.exe
                      Infected with: Backdoor.Iroffer.1217.A

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>svchost1.exe
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>svchost1.exe
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)
                      Updated

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>system.exe
                      Infected with: Backdoor.Servu.BX

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>system.exe
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>system.exe
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)
                      Updated

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>setup.bat
                      Infected with: BAT.Trojan.Zapchast

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>setup.bat
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>setup.bat
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)
                      Updated

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>HIDDEN32.EXE
                      Infected with: Virtool.Hiddenrun.B

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>HIDDEN32.EXE
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)=>HIDDEN32.EXE
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)=>(ZIP Sfx o)
                      Updated

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\56.tmp=>(Quarantine-4)
                      Update failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\69.tmp
                      Infected with: Win32.Netsky.AA@mm

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\69.tmp
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\73F.tmp=>(Quarantine-4)=>programme fcm.txt .scr
                      Infected with: Win32.Mabutu.A@mm

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\73F.tmp=>(Quarantine-4)=>programme fcm.txt .scr
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\73F.tmp=>(Quarantine-4)
                      Updated

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\73F.tmp
                      Update failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\94.tmp=>(Quarantine-4)
                      Infected with: Trojan.Downloader.VB.FI

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\94.tmp=>(Quarantine-4)
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\94.tmp=>(Quarantine-4)
                      Deleted

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\B.tmp=>(Quarantine-4)
                      Infected with: Trojan.Downloader.VB.FI

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\B.tmp=>(Quarantine-4)
                      Disinfection failed

                      C:\Program Files\Trend Micro\PC-cillin 9\QUARANTINE\B.tmp=>(Quarantine-4)
                      Deleted

                      C:\WINDOWS\Temp\system.exe
                      Infected with: Backdoor.Servu.BX

                      C:\WINDOWS\Temp\system.exe
                      Disinfection failed

                      C:\WINDOWS\Temp\system.exe
                      Deleted

                      viola donc si vous pouvez m'en dire davantage...
                      merci beaucoup !!
                      0
                      1. Ok merci beaucoup green day,
                        je vais effectuer ce scan en mode sans echec tout à l'heure.

                        @ +
                        0
                        1. Modérateur
                          re

                          oula! ok : fais le scan en mode sans echec :

                          # Démarre en mode sans échec :
                          Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
                          Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
                          Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
                          (Si F8 ne marche pas utilise la touche F5).

                          bon courage,@+
                          0
                          1. J'ai un soucis, mon PC redémarre au bout d'une 20 aine de minutes, donc impossible d'effectuer le scan en entier.
                            je ne sais pas si c'est lier aux virus eux même...

                            mais coment faire pour que mon PC ne redémarre pas tout seul et pour que je puisse finir mon scan.. ?

                            (au bout des 20 minutes j'avais déja plus de 3900 objets infectés)
                            merci de votre aide.
                            0
                            1. Modérateur
                              ok, oui, passe à l'étape suivante !

                              ++
                              0
                              1. -Tout d'abord je n'ai pas reussi a supprimer les repertoire perfecnav et hbtools.

                                -Ensuite dans Ajout/supression de programme, j'arrive pas a enlever Mysearchbar,
                                j'y ai enlevé hotbar, et le reste n'y figure pas.

                                Dois-je quand memepasser à :

                                1/ et 2/ du lien :
                                virus methode preliminaire de desinfection version fr ??
                                0
                                1. Modérateur
                                  re

                                  ok, pas mal de bébétes, du au téléchargement je suppose ...

                                  cherche et supprime les dossiers en gras :

                                  C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
                                  C:\WINDOWS\System32\fcufefph.exe
                                  C:\ Program files\perfectnav\bho == > ou un dossier du nom de eUniverse/IncrediFind

                                  c:\program files\hbtools\hbtv\hbtvhelper.dll
                                  C:\Program Files\Hotbar\Bin\4.6.1.0\HbHostIE.dll

                                  ensuite va dans ajout/supprimer un programme et supprime les programmes du même nom !

                                  ensuite, fais le 1/ et 2/ de ce lien stp :

                                  virus methode preliminaire de desinfection version fr

                                  @+

                                  On peut aussi bâtir quelque chose de beau avec les pierres qui entravent le chemin (J.W.VON GOETHE
                                  )
                                  0
                                  1. Voila le rapport généré par HijackThis :

                                    Logfile of HijackThis v1.99.1
                                    Scan saved at 18:09:45, on 23/12/2006
                                    Platform: Windows XP SP1 (WinNT 5.01.2600)
                                    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

                                    Running processes:
                                    C:\WINDOWS\System32\smss.exe
                                    C:\WINDOWS\system32\winlogon.exe
                                    C:\WINDOWS\system32\services.exe
                                    C:\WINDOWS\system32\lsass.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\System32\svchost.exe
                                    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                                    C:\WINDOWS\system32\spoolsv.exe
                                    C:\WINDOWS\System32\msasvc.exe
                                    C:\WINDOWS\Explorer.EXE
                                    C:\windows\system\hpsysdrv.exe
                                    C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
                                    C:\WINDOWS\System32\hphmon05.exe
                                    C:\HP\KBD\KBD.EXE
                                    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                    C:\Program Files\Multimedia Card Reader\shwicon2k.exe
                                    C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
                                    C:\WINDOWS\System32\svchost.exe
                                    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                    C:\WINDOWS\Temp\system.exe
                                    C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
                                    C:\PROGRA~1\Wanadoo\CnxMon.exe
                                    C:\PROGRA~1\MESSAG~1\StartMessager.exe
                                    C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
                                    C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
                                    C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
                                    C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
                                    C:\Program Files\Common files\updmgr\updmgr.exe
                                    C:\program files\altnet\points manager\points manager.exe
                                    C:\Program Files\Trend Micro\PC-cillin 9\PCCClient.exe
                                    C:\PROGRA~1\Altnet\DOWNLO~1\asm.exe
                                    C:\Program Files\Trend Micro\PC-cillin 9\Pop3trap.exe
                                    C:\WINDOWS\ALCXMNTR.EXE
                                    C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
                                    C:\Program Files\HbTools\Bin\4.8.2.0\HbtOEAddOn.exe
                                    C:\Program Files\Trend Micro\PC-cillin 9\PCCPFW.exe
                                    C:\Program Files\HbTools\Bin\4.8.2.0\HbtWeatherOnTray.exe
                                    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                                    C:\Program Files\Microsoft Money\System\mnyexpr.exe
                                    C:\WINDOWS\System32\HPZipm12.exe
                                    C:\Program Files\Messenger\msmsgs.exe
                                    C:\Program Files\Hbtools\HBTV\HBTV.exe
                                    C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
                                    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                                    C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
                                    C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
                                    C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
                                    C:\WINDOWS\System32\wuauclt.exe
                                    C:\Program Files\Wanadoo\EspaceWanadoo.exe
                                    C:\Program Files\Wanadoo\ComComp.exe
                                    C:\Program Files\Wanadoo\Watch.exe
                                    C:\Program Files\Internet Explorer\iexplore.exe
                                    C:\Program Files\HbTools\Bin\4.8.2.0\HbtSrv.exe
                                    C:\Program Files\WinRAR\WinRAR.exe
                                    C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\Rar$EX00.641\HijackThis.exe

                                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
                                    R3 - URLSearchHook: PerfectNavBHO Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:\PROGRA~1\PERFEC~1\BHO\PERFEC~2.DLL
                                    O2 - BHO: NavErrRedir Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:\PROGRA~1\PERFEC~1\BHO\PERFEC~2.DLL
                                    O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
                                    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
                                    O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll
                                    O2 - BHO: TVEngine Helper /fleok=1D8A83A5C2E6107C91A475760EA83FA5EF80752B94E3D67D587A472D38CE - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - c:\program files\hbtools\hbtv\hbtvhelper.dll
                                    O2 - BHO: phoneaccess Class - {5054F860-748D-4840-B7B4-DDDB428421AF} - C:\WINDOWS\PHONEA~1.DLL
                                    O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.8.2.0\HbtHostIE.dll
                                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                                    O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
                                    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                                    O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
                                    O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
                                    O3 - Toolbar: Hotbar - {B195B3B3-8A05-11D3-97A4-0004ACA6948E} - C:\Program Files\Hotbar\Bin\4.6.1.0\HbHostIE.dll (file missing)
                                    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
                                    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
                                    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                                    O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.8.2.0\HbtHostIE.dll
                                    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
                                    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
                                    O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
                                    O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
                                    O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
                                    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
                                    O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
                                    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
                                    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
                                    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
                                    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
                                    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
                                    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                    O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
                                    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
                                    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
                                    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                    O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
                                    O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
                                    O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
                                    O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
                                    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
                                    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
                                    O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
                                    O4 - HKLM\..\Run: [updmgr] C:\Program Files\Common files\updmgr\updmgr.exe
                                    O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
                                    O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 9\pccguide.exe"
                                    O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 9\PCCClient.exe"
                                    O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 9\Pop3trap.exe"
                                    O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY
                                    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
                                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                    O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
                                    O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.8.2.0\HbtOEAddOn.exe
                                    O4 - HKLM\..\Run: [wjcyckvq] C:\WINDOWS\System32\fcufefph.exe
                                    O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.8.2.0\HbtWeatherOnTray.exe
                                    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                                    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                                    O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
                                    O4 - HKCU\..\Run: [MoneyAgent] "c:\Program Files\Microsoft Money\System\mnyexpr.exe"
                                    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                                    O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                                    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                                    O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
                                    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                                    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                                    O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
                                    O4 - Global Startup: Picture Package Menu.lnk = ?
                                    O4 - Global Startup: Picture Package VCD Maker.lnk = ?
                                    O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
                                    O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
                                    O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
                                    O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
                                    O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
                                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
                                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
                                    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
                                    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
                                    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
                                    O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
                                    O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
                                    O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                                    O16 - DPF: {00000000-0000-0000-0000-000020040000} - http://207.234.185.217/ABoxInst_int5.exe
                                    O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
                                    O17 - HKLM\System\CCS\Services\Tcpip\..\{5C247B76-A67B-4B02-8817-C4DE80D9BE69}: NameServer = 80.10.246.130 80.10.246.3
                                    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
                                    O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                                    O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
                                    O23 - Service: Apache2.2 - Unknown owner - C:\Program Files\Apache Software Foundation\Apache2.2\bin\httpd.exe" -k runservice (file missing)
                                    O23 - Service: FireDaemon Service: ecure (ecure) - Unknown owner - C:\WINDOWS\Temp\FireDaemon.EXE
                                    O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\System32\msasvc.exe
                                    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
                                    O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 9\PCCPFW.exe
                                    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
                                    O23 - Service: FireDaemon Service: system (system) - Unknown owner - C:\WINDOWS\Temp\FireDaemon.EXE
                                    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

                                    Merci beaucoup pour votre aide,
                                    j'attends vos analysse/conseils
                                    0
                                    1. Tout d'abord merci pour la réponse ultra rapide !!
                                      - j'ai lancé hoster en mode sans echec

                                      - j'ai lancé smitfraudfix et voici les rapports :
                                      après l'option 2 en mode sans echec :

                                      SmitFraudFix v2.131

                                      Rapport fait à 17:24:01,28, 23/12/2006
                                      Executé à partir de C:\Documents and Settings\Propri‚taire\Bureau\SmitfraudFix
                                      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                                      Le type du système de fichiers est NTFS
                                      Fix executé en mode sans echec

                                      »»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix
                                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                      SrchSTS.exe by S!Ri
                                      Search SharedTaskScheduler's .dll

                                      »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

                                      »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

                                      GenericRenosFix by S!Ri

                                      »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

                                      C:\Documents and Settings\Propri‚taire\Application Data\Install.dat supprimé

                                      »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

                                      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                                      "System"=""

                                      »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

                                      Nettoyage terminé.

                                      »»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix
                                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                      SrchSTS.exe by S!Ri
                                      Search SharedTaskScheduler's .dll

                                      »»»»»»»»»»»»»»»»»»»»»»»» Fin

                                      Et voici le rapport de smitfraud avec l'option 1 apres avoir redémarré :

                                      SmitFraudFix v2.131

                                      Rapport fait à 18:00:50,37, 23/12/2006
                                      Executé à partir de C:\Documents and Settings\Propri‚taire\Bureau\SmitfraudFix
                                      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                                      Le type du système de fichiers est NTFS
                                      Fix executé en mode normal

                                      »»»»»»»»»»»»»»»»»»»»»»»» C:\

                                      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                                      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                                      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                                      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                                      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Propri‚taire

                                      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Propri‚taire\Application Data

                                      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                                      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\PROPRI~1\Favoris

                                      »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                                      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                                      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                                      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                                      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                      SrchSTS.exe by S!Ri
                                      Search SharedTaskScheduler's .dll

                                      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                                      "AppInit_DLLs"=""

                                      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                                      "System"=""

                                      »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32

                                      pe386 détecté, utilisez un scanner de Rootkit

                                      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                                      »»»»»»»»»»»»»»»»»»»»»»»» Fin

                                      Je vais maintenant télecharger hijackthis et continuer votre procédure
                                      0
                                      • 1
                                      • 2