Kerio

julie -  
Bonjour, je voudrais desinstaller kerio mais un message d'erreur s'affiche "error 1921,kerio could not be stopped. verify that you have sufficient privilege to stop system services".
et quand j'annule l'operation un message d'erreur " erreur irrecuperable lors de l'installation" s'affiche.

pourriez vous m'aider?
Merci
Configuration: Windows XP
Firefox 2.0.0.1

36 réponses

Résumé de la discussion

Problème central : la désinstallation de Kerio échoue sous Windows XP avec les messages « error 1921, kerio could not be stopped » et « erreur irrecuperable lors de l'installation ». Plusieurs réponses conseillent de vérifier les privilèges pour arrêter les services système et d'utiliser HijackThis pour identifier et corriger des entrées suspectes, notamment des entrées O16 liées à divers logiciels. La meilleure réponse évoque aussi que la version Java est correcte (jre1.5.0_09) et conseille de cocher et fixer ces éléments via HijackThis pour éliminer des composants potentiellement indésirables. D'autres échanges abordent des nettoyages complémentaires et le questionnement sur l'interaction avec Zone Alarm et AVG, ainsi que la vérification de fichiers cachés et de processus au démarrage.

Bobot (l’IA à votre service)
  2. julie
    On va dire que je le garde et si jamais j'ai des problemes a l'avenir, je le désinstallerai...
    Merci en tout cas!
    0
    1. Utilisateur anonyme
      Le problème est que j'ai remarqué que souvent ces trucs amènent un tas de bestioles dans les ordis....
      garde-le si tu y tient....
      On dit que j'ai rien vu....LOL
      0
      1. julie
        Je devrais la désinstaller tu crois?
        C'est vrai que ce n'est pas d'une utilité fulgurante mais je l'aime bien moi cette rocketdock, je m'y suis habituée...^^
        0
        2. Utilisateur anonyme
          Bien reçu
          la dernière chose que je n'aime pas trop dans ton pc, et qui n'est pas d'une utilité fulgurante:
          O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
          0
          1. julie
            Bonne journée a toi et un grand merci pour ton aide et pour ta patience !
            0
            1. Utilisateur anonyme
              Bien, une bonne chose...!
              Si tu as le moindre soucis, tu n'hésites pas.
              Bonne journée
              0
              1. julie
                il n'y a plus de pastisvc.exe en vue apres rédemarrage....
                0
                1. Utilisateur anonyme
                  ok, tu auras juste à vérifier qu'ils ne réapparaissent pas au reboot.
                  0
                  1. julie
                    ok, ils son supprimés et je n'ai rien vu en rapport avec PASTiSvc.exe dans la colonne de droite.
                    0
                    1. Utilisateur anonyme
                      oui, et tu vérifieras qu'il ne se régénère pas automatiquement...j'aime pas trop ces (2) et (3)
                      Démarrer/Exécuter/tapes ceci:
                      %SystemRoot%\system32\services.msc /s
                      regardes dans la colonne à droite si tu trouves un truc en rapport avec :
                      PASTiSvc
                      Si oui tu fais clic droit dessus/propriété et tu arrêtes le service.
                      0
                      1. julie
                        ok, le log hijackthis apres avoir coché les lignes:

                        Logfile of HijackThis v1.99.1
                        Scan saved at 11:01:49, on 21/03/2007
                        Platform: Windows XP SP2 (WinNT 5.01.2600)
                        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                        Running processes:
                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\Ati2evxx.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                        C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                        C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                        C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                        C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                        C:\WINDOWS\system32\CTsvcCDA.EXE
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\Ati2evxx.exe
                        C:\WINDOWS\system32\WgaTray.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\WINDOWS\SOUNDMAN.EXE
                        C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                        C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
                        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                        C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                        C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
                        C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                        C:\WINDOWS\system32\wuauclt.exe
                        C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
                        C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                        C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                        C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                        C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                        C:\Program Files\Mozilla Firefox 2 Beta 1\firefox.exe
                        C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
                        C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                        R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                        R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                        O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                        O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
                        O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                        O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                        O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
                        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                        O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                        O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                        O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
                        O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
                        O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                        O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                        O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                        O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                        O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
                        O8 - Extra context menu item: GoTranslate - http://ut.gotranslate.com/utd/ieutd-r.htm
                        O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?42c4cbeacae24697a8831f840c47b885
                        O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?42c4cbeacae24697a8831f840c47b885
                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                        O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
                        O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                        O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                        O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                        O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                        O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                        O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                        O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                        O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
                        O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

                        4/ effectué

                        5/j'ai 2 autres fichiers : PASTiSvc.exe(2) et PASTiSvc.exe(3), je dois les supprimer aussi ?
                        0
                        1. Utilisateur anonyme
                          ok, ta version Java est la bonne.
                          jre1.5.0_09
                          ------------------------------------------------

                          coches + fixer ceci dans Hijackthis

                          O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
                          O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
                          O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                          O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15021/CTPID.cab
                          O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
                          ---------------------------------------------------------------

                          4/ Assure-toi que tu as accès aux fichiers cachés.
                          (Démarrer->Poste de travail->Outils->Options des dossiers...->Affichage
                          "Afficher les fichiers et dossiers cachés" ->coché
                          "Masquer les extensions des fichiers dont le type est connu" ->décoché
                          "Masquer les fichiers protégés du système d'exploitation" ->décoché)

                          5/ ensuite supprime les fichiers et/ou dossiers suivants si présents :

                          C:\WINDOWS\System32\PAStiSvc.exe
                          0
                          1. julie
                            bonjour!
                            le log hijackthis apres avoir coché les lignes:

                            Logfile of HijackThis v1.99.1
                            Scan saved at 10:09:46, on 21/03/2007
                            Platform: Windows XP SP2 (WinNT 5.01.2600)
                            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                            Running processes:
                            C:\WINDOWS\System32\smss.exe
                            C:\WINDOWS\system32\winlogon.exe
                            C:\WINDOWS\system32\services.exe
                            C:\WINDOWS\system32\lsass.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                            C:\WINDOWS\system32\spoolsv.exe
                            C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                            C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                            C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                            C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                            C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                            C:\WINDOWS\system32\CTsvcCDA.EXE
                            C:\WINDOWS\System32\PAStiSvc.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\system32\WgaTray.exe
                            C:\WINDOWS\Explorer.EXE
                            C:\WINDOWS\SOUNDMAN.EXE
                            C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                            C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
                            C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                            C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                            C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                            C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
                            C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                            C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
                            C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                            C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                            C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                            C:\Program Files\Mozilla Firefox 2 Beta 1\firefox.exe
                            C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                            C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
                            C:\Program Files\MSN Messenger\msnmsgr.exe
                            C:\Program Files\MSN Messenger\usnsvc.exe
                            C:\Program Files\eMule\emule.exe
                            C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

                            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                            R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                            R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                            O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                            O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                            O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                            O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                            O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
                            O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                            O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                            O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                            O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                            O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
                            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
                            O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                            O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                            O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                            O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
                            O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
                            O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                            O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                            O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                            O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                            O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
                            O8 - Extra context menu item: GoTranslate - http://ut.gotranslate.com/utd/ieutd-r.htm
                            O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?42c4cbeacae24697a8831f840c47b885
                            O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?42c4cbeacae24697a8831f840c47b885
                            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
                            O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
                            O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                            O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15021/CTPID.cab
                            O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
                            O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                            O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                            O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                            O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                            O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                            O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                            O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                            O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                            O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
                            O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
                            O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

                            le log antispyware :

                            SUPERAntiSpyware Scan Log
                            Generated 03/20/2007 at 09:11 PM

                            Application Version : 3.6.1000

                            Core Rules Database Version : 3203
                            Trace Rules Database Version: 1213

                            Scan type : Quick Scan
                            Total Scan Time : 00:14:44

                            Memory items scanned : 537
                            Memory threats detected : 0
                            Registry items scanned : 664
                            Registry threats detected : 0
                            File items scanned : 16590
                            File threats detected : 6

                            Adware.Tracking Cookie
                            C:\Documents and Settings\Rousteen\Cookies\rousteen@yourmedia[1].txt
                            C:\Documents and Settings\Rousteen\Cookies\rousteen@atdmt[2].txt
                            C:\Documents and Settings\Rousteen\Cookies\rousteen@weborama[2].txt
                            C:\Documents and Settings\Rousteen\Cookies\rousteen@bluestreak[2].txt
                            C:\Documents and Settings\Rousteen\Cookies\rousteen@stats1.reliablestats[2].txt
                            C:\Documents and Settings\Rousteen\Cookies\rousteen@doubleclick[1].txt
                            0
                            1. Utilisateur anonyme
                              Ok, j'attends la suite.
                              0
                              1. julie
                                Oui, j'essaye de m'appliquer!

                                j'ai bien coché les lignes dans le log hijackthis et scanné avec superantispyware.
                                0
                                1. Utilisateur anonyme
                                  Parfait,
                                  je vois que tu t'en sorts trés bien.
                                  On avance.
                                  -------------------------------------------------------
                                  Refaits un scan seul + cocher + fixer avec Hijackthis
                                  -----------------------------------------------------------------
                                  coches les lignes:

                                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                  O9 - Extra button: GoTranslate - {21C9EF41-92BE-11d3-9AB8-005004B85154} - http://ut.gotranslate.com/utd/ieutd-b.htm (file missing)
                                  O9 - Extra 'Tools' menuitem: GoTranslate - {21C9EF41-92BE-11d3-9AB8-005004B85154} - http://ut.gotranslate.com/utd/ieutd-b.htm (file missing)
                                  --------------------------------------------------------------------------
                                  je voudrais que tu fasses ceci:
                                  download ceci:
                                  https://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
                                  Installes-le.
                                  Accepte la mise à jour.
                                  Ne tapes pas ton adresse @mail à la demande, tu zappes.
                                  Décoches aussi après la demande d'envoi de rapport.
                                  Ensuite, scan ta machine.
                                  Il est possible qu'il demande de rebooter en fin de désinfection éventuelle.
                                  Acceptes.
                                  0
                                  1. julie
                                    ok, voici le log apres avoir renommé hijackthis.exe :

                                    Logfile of HijackThis v1.99.1
                                    Scan saved at 10:23:45, on 20/03/2007
                                    Platform: Windows XP SP2 (WinNT 5.01.2600)
                                    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                                    Running processes:
                                    C:\WINDOWS\System32\smss.exe
                                    C:\WINDOWS\system32\winlogon.exe
                                    C:\WINDOWS\system32\services.exe
                                    C:\WINDOWS\system32\lsass.exe
                                    C:\WINDOWS\system32\Ati2evxx.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\System32\svchost.exe
                                    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                                    C:\WINDOWS\system32\spoolsv.exe
                                    C:\WINDOWS\system32\Ati2evxx.exe
                                    C:\WINDOWS\Explorer.EXE
                                    C:\WINDOWS\SOUNDMAN.EXE
                                    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                                    C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
                                    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                                    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                                    C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                                    C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
                                    C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                                    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                                    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                                    C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                                    C:\WINDOWS\system32\CTsvcCDA.EXE
                                    C:\WINDOWS\System32\PAStiSvc.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\system32\WgaTray.exe
                                    C:\Program Files\MSN Messenger\msnmsgr.exe
                                    C:\Program Files\MSN Messenger\usnsvc.exe
                                    C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
                                    C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

                                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                                    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                    O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
                                    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                                    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
                                    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
                                    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                                    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                                    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                                    O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
                                    O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                                    O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                                    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                                    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                                    O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
                                    O8 - Extra context menu item: GoTranslate - http://ut.gotranslate.com/utd/ieutd-r.htm
                                    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?42c4cbeacae24697a8831f840c47b885
                                    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?42c4cbeacae24697a8831f840c47b885
                                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                                    O9 - Extra button: GoTranslate - {21C9EF41-92BE-11d3-9AB8-005004B85154} - http://ut.gotranslate.com/utd/ieutd-b.htm (file missing)
                                    O9 - Extra 'Tools' menuitem: GoTranslate - {21C9EF41-92BE-11d3-9AB8-005004B85154} - http://ut.gotranslate.com/utd/ieutd-b.htm (file missing)
                                    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
                                    O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
                                    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                                    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15021/CTPID.cab
                                    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                                    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                                    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                                    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                                    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                                    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                                    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                                    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                                    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
                                    O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
                                    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

                                    et le log d'avg :

                                    ---------------------------------------------------------
                                    AVG Anti-Spyware - Rapport d'analyse
                                    ---------------------------------------------------------

                                    + Créé à: 11:01:43 20/03/2007

                                    + Résultat de l'analyse:

                                    :mozilla.10:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
                                    :mozilla.11:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
                                    :mozilla.12:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
                                    :mozilla.9:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
                                    :mozilla.29:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
                                    :mozilla.30:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
                                    :mozilla.49:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
                                    :mozilla.50:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
                                    :mozilla.51:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
                                    :mozilla.52:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
                                    :mozilla.53:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
                                    :mozilla.44:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
                                    C:\Documents and Settings\Rousteen\Cookies\rousteen@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
                                    :mozilla.27:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
                                    C:\Documents and Settings\Rousteen\Cookies\rousteen@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
                                    :mozilla.159:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
                                    :mozilla.160:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
                                    :mozilla.161:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
                                    :mozilla.28:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
                                    C:\Documents and Settings\Rousteen\Cookies\rousteen@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
                                    :mozilla.47:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
                                    :mozilla.102:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
                                    :mozilla.73:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Itrack : Nettoyé.
                                    :mozilla.66:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
                                    :mozilla.67:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
                                    :mozilla.68:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
                                    :mozilla.69:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
                                    :mozilla.70:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
                                    :mozilla.71:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
                                    :mozilla.72:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Live : Nettoyé.
                                    :mozilla.129:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
                                    :mozilla.170:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
                                    :mozilla.136:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.137:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.138:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.139:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.140:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.141:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.142:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.143:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.144:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.146:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.147:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    C:\Documents and Settings\Rousteen\Cookies\rousteen@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Nettoyé.
                                    :mozilla.36:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
                                    :mozilla.39:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
                                    :mozilla.40:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
                                    :mozilla.41:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
                                    :mozilla.42:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
                                    :mozilla.43:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
                                    :mozilla.59:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
                                    :mozilla.60:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
                                    :mozilla.61:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
                                    :mozilla.37:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
                                    :mozilla.38:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
                                    C:\Documents and Settings\Rousteen\Cookies\rousteen@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
                                    :mozilla.111:C:\Documents and Settings\Rousteen\Application Data\Mozilla\Firefox\Profiles\6m3hy0mt.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
                                    C:\Documents and Settings\Rousteen\Cookies\rousteen@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyé.

                                    Fin du rapport
                                    0
                                    2. julie
                                      je crois que le pc se porte mieux! en tout cas je n'ai plus pour l'instant de fenetres de pub qui s'ouvrent à tout bout de champs....

                                      voici le log hijackthis:

                                      Logfile of HijackThis v1.99.1
                                      Scan saved at 19:34:42, on 19/03/2007
                                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                                      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                                      Running processes:
                                      C:\WINDOWS\System32\smss.exe
                                      C:\WINDOWS\system32\winlogon.exe
                                      C:\WINDOWS\system32\services.exe
                                      C:\WINDOWS\system32\lsass.exe
                                      C:\WINDOWS\system32\Ati2evxx.exe
                                      C:\WINDOWS\system32\svchost.exe
                                      C:\WINDOWS\System32\svchost.exe
                                      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                                      C:\WINDOWS\system32\spoolsv.exe
                                      C:\WINDOWS\system32\Ati2evxx.exe
                                      C:\WINDOWS\Explorer.EXE
                                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                      C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                                      C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                                      C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                                      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                                      C:\WINDOWS\system32\CTsvcCDA.EXE
                                      C:\WINDOWS\SOUNDMAN.EXE
                                      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                                      C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
                                      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                                      C:\WINDOWS\System32\PAStiSvc.exe
                                      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                                      C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                                      C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
                                      C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                                      C:\WINDOWS\system32\svchost.exe
                                      C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                                      C:\WINDOWS\system32\WgaTray.exe
                                      C:\Program Files\MSN Messenger\msnmsgr.exe
                                      C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
                                      C:\Program Files\MSN Messenger\usnsvc.exe
                                      C:\Program Files\Mozilla Firefox 2 Beta 1\firefox.exe
                                      C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                                      C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                                      C:\WINDOWS\system32\wuauclt.exe
                                      C:\hijackthis\HijackThis.exe

                                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                      O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
                                      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                                      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
                                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
                                      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                                      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                                      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                                      O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
                                      O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
                                      O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
                                      O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                                      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                                      O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                                      O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
                                      O8 - Extra context menu item: GoTranslate - http://ut.gotranslate.com/utd/ieutd-r.htm
                                      O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?42c4cbeacae24697a8831f840c47b885
                                      O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?42c4cbeacae24697a8831f840c47b885
                                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
                                      O9 - Extra button: GoTranslate - {21C9EF41-92BE-11d3-9AB8-005004B85154} - http://ut.gotranslate.com/utd/ieutd-b.htm (file missing)
                                      O9 - Extra 'Tools' menuitem: GoTranslate - {21C9EF41-92BE-11d3-9AB8-005004B85154} - http://ut.gotranslate.com/utd/ieutd-b.htm (file missing)
                                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
                                      O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
                                      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                                      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15021/CTPID.cab
                                      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                                      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                                      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                                      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                                      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                      O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                                      O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                                      O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                                      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                                      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
                                      O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
                                      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                                      0
                                      • 1
                                      • 2

                                      Discussions similaires

                                      problème kerio
                                      sphillips

                                      2 réponses
                                      Kerio firewall
                                      ludox

                                      4 réponses
                                      Kerio et cookies?
                                      danilenou

                                      6 réponses
                                      [parefeur] Kerio ou ZoneAlarm ?
                                      dcanl

                                      28 réponses
                                      Configurer Kerio pour aol
                                      yunie95

                                      1 réponse