Win32 bho kd trj
RésoluBonne année à tous.
Je suis également infecté par un trojan détecté par avast : win32bho kd trj
Avast ne peut ni le mettre en quarantaine, ni le supprimer.
Que faire ?
Merci par avance.
Configuration: Windows XP Firefox 2.0.0.11
34 réponses
Une infection par un cheval de Troie est détectée par Avast sur Windows XP, et la quarantaine ou la suppression directe échouent. Des solutions proposées privilégient HijackThis et ComboFix pour générer des rapports d’analyse et identifier les éléments malveillants à traiter. Des guides expliquent le téléchargement et l’utilisation de ces outils, puis la réparation des fichiers système modifiés et la remise en service des composants sûrs. Dans certains cas, l’examen des journaux de HijackThis et les sauvegardes permettent de repérer des instances persistantes et d’organiser les étapes de nettoyage.
-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:26:55, on 13/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\WINDOWS\BUtilityBar\BisonBar.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Spyware-Secure\Spyware-Secure_trial.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Eurobarre\eb.exe
C:\Program Files\SM\skymessnet.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jeuxvideo-flash.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://runonce.msn.com/runonce3.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\DOCUME~1\Audrey\LOCALS~1\Temp\services.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: Babylon - {965B54B0-71E0-4611-8DE7-F73FA0B20E26} - C:\Program Files\Babylon\Babylon Toolbar\BabylonIEToolBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [BisonBar] C:\WINDOWS\BUtilityBar\BisonBar.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [Flash Media] C:\DOCUME~1\Audrey\LOCALS~1\Temp\services.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Spyware-Secure] C:\Program Files\Spyware-Secure\Spyware-Secure_trial.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [eqfuie] c:\documents and settings\audrey\local settings\application data\eqfuie.exe eqfuie
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Eurobarre.lnk = C:\Program Files\Eurobarre\eb.exe
O4 - Startup: SM.lnk = C:\Program Files\SM\skymessnet.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\Broderbund\PrintMaster\PMremind.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Acer Empowering Technology.lnk = C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\EROProj.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {63308B48-F435-42FD-AB0A-3564C7BEF9D7} (Toontown Install/Update Helper French) - https://iplay.fr.toontown.com/download/sv1.5.19.3/ttinst-french.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DE8C8CA6-12AE-4194-B163-B406F566CA4E}: NameServer = 80.10.246.2,80.10.246.129
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Desktop Manager 5.1.709.19590 (GoogleDesktopManager-091907-194040) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Control Parental (OPTENET_FILTER) - Contrôle Parental - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe (file missing)
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:50:14, on 16/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Seekmo\bin\10.0.406.0\OEAddOn.exe
C:\Program Files\Seekmo\bin\10.0.406.0\SeekmoSA.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Seekmo /fleok=1D8A83A5C5ED177791AB6E2A1FBB39BFE4976E26CAEDA120180A196D6093 - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.406.0\HostIE.dll
O2 - BHO: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\nnnmnml.dll
O2 - BHO: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: {8168c58f-2584-b07a-a314-5181f013495a} - {a594310f-1815-413a-a70b-4852f85c8618} - C:\WINDOWS\system32\dmflmdqp.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
O3 - Toolbar: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
O3 - Toolbar: Seekmo - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.406.0\HostIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SeekmoOE] C:\Program Files\Seekmo\bin\10.0.406.0\OEAddOn.exe
O4 - HKLM\..\Run: [SeekmoSA] "C:\Program Files\Seekmo\bin\10.0.406.0\SeekmoSA.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [e8b8102c] rundll32.exe "C:\WINDOWS\system32\dxstjrsj.dll",b
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [xamcwl] c:\windows\system32\xamcwl.exe xamcwl
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://E:\LOGICI~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\LOGICI~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O20 - Winlogon Notify: nnnmnml - C:\WINDOWS\SYSTEM32\nnnmnml.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:50:14, on 16/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Seekmo\bin\10.0.406.0\OEAddOn.exe
C:\Program Files\Seekmo\bin\10.0.406.0\SeekmoSA.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Seekmo /fleok=1D8A83A5C5ED177791AB6E2A1FBB39BFE4976E26CAEDA120180A196D6093 - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.406.0\HostIE.dll
O2 - BHO: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\nnnmnml.dll
O2 - BHO: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: {8168c58f-2584-b07a-a314-5181f013495a} - {a594310f-1815-413a-a70b-4852f85c8618} - C:\WINDOWS\system32\dmflmdqp.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
O3 - Toolbar: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
O3 - Toolbar: Seekmo - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.406.0\HostIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SeekmoOE] C:\Program Files\Seekmo\bin\10.0.406.0\OEAddOn.exe
O4 - HKLM\..\Run: [SeekmoSA] "C:\Program Files\Seekmo\bin\10.0.406.0\SeekmoSA.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [e8b8102c] rundll32.exe "C:\WINDOWS\system32\dxstjrsj.dll",b
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [xamcwl] c:\windows\system32\xamcwl.exe xamcwl
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://E:\LOGICI~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\LOGICI~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O20 - Winlogon Notify: nnnmnml - C:\WINDOWS\SYSTEM32\nnnmnml.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
-
ContributeurBonsoir
il faut créer ton propre sujet
merci -
Bonjour à vous tous,
Je vois tout ces chiffres et lettres... mais je ne comprend rien. Hijackthis me donne un rapport et je ne sais pas quoi faire... Comment savoir quel case cocher pour que je puisse clicker sur FIXE?
A L'AIDE...
rogrichard -
ContributeurBonsoir
content pour toi
Tu peux supprimer tous les logiciels que nous avons utilisés
va dans ajout/suppression de programes et dans programmes files
pour vérifier
ensuite fais ceci (IMPORTANT)
=> démarrer
=> panneau de configuration
=> système
=> onglet Restauration système
=> coche la case (Désactiver la restauration système)
=> redémarre l'ordinateur
=> réactive la ensuite
bonne chance pour la suite
@+ ;-) -
Bonsoir,
Après plusieurs jours d'utilisation, et sans manip particulière, mon pc a retrouvé sa vitesse d'exécution normale.
Merci beaucoup, EP 44 ! -
ContributeurSalut il faut créer ton propre sujet
http://perso.orange.fr/rginformatique/section%20virus/demofairesontmessage.htm
merci
@+ -
bonjour besoin d'aide j'ai aussi été infecté par ce logiciel malveillant Win32: BHO-KD trj je ne sais pas comment le supprimer aider moi, jai suivi vos instructions jai téléchargé hijackthis et voici le rapport qui en résulte.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:12:01, on 19/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Ares\Ares.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0F0BD815-8BA1-4E19-B03F-F74F5877CF88} - C:\WINDOWS\system32\ciodmb.dll
O2 - BHO: (no name) - {68C805D6-3165-40FB-8A49-2EE72BA39529} - c:\windows\system32\aaaamona.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [loader32] C:\Program Files\Internet Explorer\IEXPLORE.EXE
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [SaferScan] C:\Program Files\SaferScan\saferscan.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [bm] "C:\Program Files\Fichiers communs\VirusGarde\bm.exe" dm=http://virusgarde.com ad=http://virusgarde.com sd=http://gregistre.virusgarde.com
O4 - HKLM\..\Run: [ptask] C:\Program Files\VirusGarde\ptask.exe
O4 - HKCU\..\Run: [Shellapi32] svcnet.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-2990767366-334248674-7028198-1010\..\Run: [Shellapi32] svcnet.exe (User '?')
O4 - HKUS\S-1-5-21-2990767366-334248674-7028198-1010\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent (User '?')
O4 - HKUS\S-1-5-21-2990767366-334248674-7028198-1010\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx (User '?')
O4 - HKUS\S-1-5-21-2990767366-334248674-7028198-1010\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c (User '?')
O4 - HKUS\S-1-5-21-2990767366-334248674-7028198-1010\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h (User '?')
O4 - HKUS\S-1-5-21-2990767366-334248674-7028198-1010\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\npjpi150_07.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\npjpi150_07.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {8731163E-77B9-4F91-9122-F112521C28AF} (MMSPlayerX Class) - http://mmt.bouyguestelecom.fr/mmawap/jsp/composer/player/mmsPlayer.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AA3FE8DC-0871-43BC-8E4B-E8FEBB10F40B}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CCS\Services\Tcpip\..\{E8ADD549-30A8-4C82-A03E-08673E83FE14}: NameServer = 80.10.246.2,80.10.246.129
O20 - Winlogon Notify: qbeffhua - C:\WINDOWS\SYSTEM32\aaaamona.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
-
ContributeurBonsoir
refais un hijack stp
@+ -
Bonjour,
Désolé de n'avoir pu revenir plus tôt.
Mon pc est devenu beaucoup plus lent, j'ai donc fait les mise à jour et réparé la base de registres comme indique sur les liens.
Après avoir constaté une amélioration, je suis encore confronté à une lenteur inhabituelle... -
Contributeuras tu fait les mises à jours comme indiqués plus haut
beaucoup d'infections par ta messagerie
il ne faut pas ouvrir ce que tu ne connais pas
@+ -
Oups !
Désolé, j'ai rectifié le tir et édite mon message. -
ContributeurBonjour Mab24,
tu n'as pas posté le rapport de bitdefender mais l'ancien de AVG as
ton IE n'est plus d'actualité
http://www.google.com/toolbar/ie7/intl/fr/
ensuite fait tes mises à jours de windows
http://www.update.microsoft.com/windowsupdate/v6/thanks.aspx?ln=fr&&thankspage=5
ensuite regarde ce lien http://www.commentcamarche.net/faq/sujet 3446 windows xp mon pc rame que faire
suit les étapes une par une
une fois fait tient moi au courant
et dit moi si tu as encore des soucis
@+ -
Et celui de hijack !
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:53:41, on 07/01/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp3\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\WINDOWS\System32\sstray.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\WinPortrait\wpctrl.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\BeClean\bca.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\WinPortrait\floater.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Alwil Software\Avast4\ashLogV.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.fr.netscape.com/fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.fr.netscape.com/fr/home/winsearch.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.fr.netscape.com/fr/home/winsearch200.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.fr.netscape.com/fr/home/winsearch.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.fr.netscape.com/fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://keyword.fr.netscape.com/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
N1 - Netscape 4: user_pref("browser.startup.homepage", ""); (C:\Program Files\Netscape\Users\jluc\prefs.js)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp3\winampa.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe"
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\System32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\WinPortrait\wpctrl.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [BeClean Start-Up Clean] C:\Program Files\BeClean\BeClean.exe /s
O4 - HKLM\..\Run: [BeClean Agent] C:\Program Files\BeClean\bca.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - https://www.cult3d.com/
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/2328ee0e86968d964622/netzip/RdxIE601_fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/dubos/LOCALS~1/Temp/msohtml1/01/clip_image003.gif
-
Bonjour,
Voici le raaport bit defender :
BitDefender Online Scanner
Rapport d'analyse généré à: Mon, Jan 07, 2008 - 08:51:17
Voie d'analyse: A:\;C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;K:\;M:\;N:\;O:\;P:\;
Statistiques
Temps
18:32:48
Fichiers
2403931
Directoires
39958
Secteurs de boot
6
Archives
401760
Paquets programmes
69558
Résultats
Virus identifiés
91
Fichiers infectés
150
Fichiers suspects
0
Avertissements
0
Désinfectés
0
Fichiers effacés
0
Info sur les moteurs
Définition virus
885530
Version des moteurs
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Analyse des plugins
14
Archive des plugins
38
Unpack des plugins
7
E-mail plugins
6
Système plugins
1
Paramètres d'analyse
Première action
Rapport
Seconde Action
__SECACT__
Heuristique
Oui
Acceptez les avertissements
Oui
Extensions analysées
*;
Excludez les extensions
Analyse d'emails
Oui
Analyse des Archives
Oui
Analyser paquets programmes
Oui
Analyse des fichiers
Oui
Analyse de boot
Oui
Fichier analysé
Statut
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Inbox=>(message 16967)
Infecté par: Generic.Peed.Eml.21C9FF8B
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1792)
Infecté par: Generic.Peed.Eml.4708C3B3
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1794)
Infecté par: Generic.Peed.Eml.460DEBCF
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1797)
Infecté par: Generic.Peed.Eml.CB455CC5
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1802)
Infecté par: Generic.Peed.Eml.F001A4CE
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1806)
Infecté par: Generic.Peed.Eml.CF9EAF80
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1818)
Infecté par: Generic.Peed.Eml.8C0D549E
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1820)
Infecté par: Generic.Peed.Eml.72B1CF21
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1823)
Infecté par: Generic.Peed.Eml.B4081D8C
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1828)
Infecté par: Generic.Peed.Eml.8B65EA36
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1829)
Infecté par: Generic.Peed.Eml.EBE40DC9
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1832)
Infecté par: Generic.Peed.Eml.6864FAB4
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1838)
Infecté par: Generic.Peed.Eml.712BB407
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1846)
Infecté par: Generic.Peed.Eml.56A8FA51
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1849)
Infecté par: Generic.Peed.Eml.27F65588
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1850)
Infecté par: Generic.Peed.Eml.1A7E0A24
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1851)
Infecté par: Generic.Peed.Eml.F12E7CDF
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1852)
Infecté par: Generic.Peed.Eml.0669F95E
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1853)
Infecté par: Generic.Peed.Eml.76A0E38B
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1854)
Infecté par: Generic.Peed.Eml.F49FCDAA
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1855)
Infecté par: Generic.Peed.Eml.225A23AE
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1857)
Infecté par: Generic.Peed.Eml.F2BFA659
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1876)
Infecté par: Generic.Peed.Eml.55379FD5
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1878)
Infecté par: Generic.Peed.Eml.EB539359
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1879)
Infecté par: Generic.Peed.Eml.7F795C67
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1880)
Infecté par: Generic.Peed.Eml.F52BFCA6
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1885)
Infecté par: Generic.Peed.Eml.A9E6DF5A
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders\Trash=>(message 1889)
Infecté par: Generic.Peed.Eml.C15A78D2
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Boîte de réception=>(message 7988)=>[Subject: [avast! - INFECTED] Mail Delivery (f][Date: Wed, 21 Jun 2006 04:05:01 +0300]=>(MIME part)=>(MIME part)=>(message body)
Infecté par: Exploit.Iframe.Vulnerability.B
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 897)
Infecté par: Generic.Peed.Eml.4708C3B3
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 899)
Infecté par: Generic.Peed.Eml.460DEBCF
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 902)
Infecté par: Generic.Peed.Eml.CB455CC5
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 907)
Infecté par: Generic.Peed.Eml.F001A4CE
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 911)
Infecté par: Generic.Peed.Eml.CF9EAF80
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 923)
Infecté par: Generic.Peed.Eml.8C0D549E
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 925)
Infecté par: Generic.Peed.Eml.72B1CF21
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 928)
Infecté par: Generic.Peed.Eml.B4081D8C
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 933)
Infecté par: Generic.Peed.Eml.8B65EA36
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 934)
Infecté par: Generic.Peed.Eml.EBE40DC9
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 937)
Infecté par: Generic.Peed.Eml.6864FAB4
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 943)
Infecté par: Generic.Peed.Eml.712BB407
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 951)
Infecté par: Generic.Peed.Eml.56A8FA51
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 954)
Infecté par: Generic.Peed.Eml.27F65588
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 955)
Infecté par: Generic.Peed.Eml.1A7E0A24
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 956)
Infecté par: Generic.Peed.Eml.F12E7CDF
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 957)
Infecté par: Generic.Peed.Eml.0669F95E
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 958)
Infecté par: Generic.Peed.Eml.76A0E38B
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 959)
Infecté par: Generic.Peed.Eml.F49FCDAA
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 960)
Infecté par: Generic.Peed.Eml.225A23AE
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 962)
Infecté par: Generic.Peed.Eml.F2BFA659
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 981)
Infecté par: Generic.Peed.Eml.55379FD5
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 983)
Infecté par: Generic.Peed.Eml.EB539359
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 984)
Infecté par: Generic.Peed.Eml.7F795C67
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 985)
Infecté par: Generic.Peed.Eml.F52BFCA6
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 990)
Infecté par: Generic.Peed.Eml.A9E6DF5A
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\Local Folders2\Éléments supprimés=>(message 994)
Infecté par: Generic.Peed.Eml.C15A78D2
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Boîte de réception=>(message 7988)=>[Subject: [avast! - INFECTED] Mail Delivery (f][Date: Wed, 21 Jun 2006 04:05:01 +0300]=>(MIME part)=>(MIME part)=>(message body)
Infecté par: Exploit.Iframe.Vulnerability.B
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 897)
Infecté par: Generic.Peed.Eml.4708C3B3
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 899)
Infecté par: Generic.Peed.Eml.460DEBCF
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 902)
Infecté par: Generic.Peed.Eml.CB455CC5
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 907)
Infecté par: Generic.Peed.Eml.F001A4CE
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 911)
Infecté par: Generic.Peed.Eml.CF9EAF80
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 923)
Infecté par: Generic.Peed.Eml.8C0D549E
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 925)
Infecté par: Generic.Peed.Eml.72B1CF21
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 928)
Infecté par: Generic.Peed.Eml.B4081D8C
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 933)
Infecté par: Generic.Peed.Eml.8B65EA36
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 934)
Infecté par: Generic.Peed.Eml.EBE40DC9
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 937)
Infecté par: Generic.Peed.Eml.6864FAB4
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 943)
Infecté par: Generic.Peed.Eml.712BB407
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 951)
Infecté par: Generic.Peed.Eml.56A8FA51
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 954)
Infecté par: Generic.Peed.Eml.27F65588
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 955)
Infecté par: Generic.Peed.Eml.1A7E0A24
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 956)
Infecté par: Generic.Peed.Eml.F12E7CDF
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 957)
Infecté par: Generic.Peed.Eml.0669F95E
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 958)
Infecté par: Generic.Peed.Eml.76A0E38B
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 959)
Infecté par: Generic.Peed.Eml.F49FCDAA
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 960)
Infecté par: Generic.Peed.Eml.225A23AE
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 962)
Infecté par: Generic.Peed.Eml.F2BFA659
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 981)
Infecté par: Generic.Peed.Eml.55379FD5
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 983)
Infecté par: Generic.Peed.Eml.EB539359
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 984)
Infecté par: Generic.Peed.Eml.7F795C67
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 985)
Infecté par: Generic.Peed.Eml.F52BFCA6
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 990)
Infecté par: Generic.Peed.Eml.A9E6DF5A
C:\Documents and Settings\dubos\Application Data\Thunderbird\Profiles\kfs6vvyn.default\Mail\pop.tiscali.fr\Éléments supprimés=>(message 994)
Infecté par: Generic.Peed.Eml.C15A78D2
C:\QooBox\Quarantine\C\WINDOWS\system32\avwavh.dll.vir
Infecté par: Trojan.Spy.Bzub.NGP
C:\System Volume Information\_restore{90FEB88B-5CE9-42F4-BFE3-0D0D3AF97BD4}\RP3\A0000143.dll
Infecté par: Trojan.Spy.Bzub.NGP
D:\Downloads\applications\Alcohol120.v1.4.6.(Build.711)-crack.rar=>REGPATCH.EXE
Infecté par: Trojan.Regpat.A
D:\Downloads\applications\IMSI.FLOORPLAN.3D.DESIGN.SUITE.V9.0-TDA.bin=>CRACK/ssg-fp9.exe
Infecté par: Packer.FSG.A
F:\Documents and Settings\xp\.housecall6.6\Quarantine\Alcatel (Unlock - Débloquer - Programme).rar.bac_a02300=>(Quarantine-4)=>Alcatel\DIVERS\989_alcabe5unleuro.zip=>alcabe5unl.exe
Infecté par: Trojan.Win32.Belocker.A
F:\Documents and Settings\xp\.housecall6.6\Quarantine\Alcatel (Unlock - Débloquer - Programme).rar.bac_a03456=>(Quarantine-4)=>Alcatel\DIVERS\989_alcabe5unleuro.zip=>alcabe5unl.exe
Infecté par: Trojan.Win32.Belocker.A
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Boîte de réception=>(message 7988)=>[Subject: [avast! - INFECTED] Mail Delivery (f][Date: Wed, 21 Jun 2006 04:05:01 +0300]=>(MIME part)=>(MIME part)=>(message body)
Infecté par: Exploit.Iframe.Vulnerability.B
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 897)
Infecté par: Generic.Peed.Eml.4708C3B3
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 899)
Infecté par: Generic.Peed.Eml.460DEBCF
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 902)
Infecté par: Generic.Peed.Eml.CB455CC5
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 907)
Infecté par: Generic.Peed.Eml.F001A4CE
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 911)
Infecté par: Generic.Peed.Eml.CF9EAF80
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 923)
Infecté par: Generic.Peed.Eml.8C0D549E
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 925)
Infecté par: Generic.Peed.Eml.72B1CF21
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 928)
Infecté par: Generic.Peed.Eml.B4081D8C
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 933)
Infecté par: Generic.Peed.Eml.8B65EA36
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 934)
Infecté par: Generic.Peed.Eml.EBE40DC9
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 937)
Infecté par: Generic.Peed.Eml.6864FAB4
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 943)
Infecté par: Generic.Peed.Eml.712BB407
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 951)
Infecté par: Generic.Peed.Eml.56A8FA51
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 954)
Infecté par: Generic.Peed.Eml.27F65588
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 955)
Infecté par: Generic.Peed.Eml.1A7E0A24
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 956)
Infecté par: Generic.Peed.Eml.F12E7CDF
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 957)
Infecté par: Generic.Peed.Eml.0669F95E
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 958)
Infecté par: Generic.Peed.Eml.76A0E38B
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 959)
Infecté par: Generic.Peed.Eml.F49FCDAA
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 960)
Infecté par: Generic.Peed.Eml.225A23AE
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 962)
Infecté par: Generic.Peed.Eml.F2BFA659
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 981)
Infecté par: Generic.Peed.Eml.55379FD5
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 983)
Infecté par: Generic.Peed.Eml.EB539359
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 984)
Infecté par: Generic.Peed.Eml.7F795C67
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 985)
Infecté par: Generic.Peed.Eml.F52BFCA6
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 990)
Infecté par: Generic.Peed.Eml.A9E6DF5A
F:\Documents and Settings\xp\Application Data\Thunderbird\Profiles\k9hlrrjg.default\Mail\Local Folders\Éléments supprimés=>(message 994)
Infecté par: Generic.Peed.Eml.C15A78D2
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{1E85803C-686D-443F-A20D-8A2F6118520D}\Microsoft\Outlook Express\Boîte de réception.dbx=>(message 710)=>[Subject: [avast! - INFECTED] Mail Delivery (f][Date: Wed, 21 Jun 2006 04:05:01 +0300]=>(MIME part)=>(MIME part)=>(message body)
Infecté par: Exploit.Iframe.Vulnerability.B
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Boîte de réception.dbx=>(message 1177)
Infecté par: Generic.Peed.Eml.994272CC
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Boîte de réception.dbx=>(message 9448)=>[Subject: [avast! - INFECTED] Mail Delivery (f][Date: Wed, 21 Jun 2006 04:05:01 +0300]=>(MIME part)=>(MIME part)=>(message body)
Infecté par: Exploit.Iframe.Vulnerability.B
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 443)
Infecté par: Generic.Peed.Eml.7FDDA6E7
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 447)
Infecté par: Generic.Peed.Eml.FE2620C0
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 452)
Infecté par: Generic.Peed.Eml.E75E80BD
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 453)
Infecté par: Generic.Peed.Eml.8EF237FC
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 454)
Infecté par: Generic.Peed.Eml.42813806
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 456)
Infecté par: Generic.Peed.Eml.2827D352
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 474)
Infecté par: Generic.Peed.Eml.0656427A
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 475)
Infecté par: Generic.Peed.Eml.6CA051FD
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 477)
Infecté par: Generic.Peed.Eml.12304A99
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 478)
Infecté par: Generic.Peed.Eml.F3D3AED9
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 479)
Infecté par: Generic.Peed.Eml.B6139B37
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 480)
Infecté par: Generic.Peed.Eml.971334DF
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 481)
Infecté par: Generic.Peed.Eml.04F7A03F
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 482)
Infecté par: Generic.Peed.Eml.BBC52364
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 483)
Infecté par: Generic.Peed.Eml.53E3FBCB
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 486)
Infecté par: Generic.Peed.Eml.24298EFC
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 494)
Infecté par: Generic.Peed.Eml.DD7F637A
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 500)
Infecté par: Generic.Peed.Eml.8CE296A6
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 503)
Infecté par: Generic.Peed.Eml.7066AF07
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 504)
Infecté par: Generic.Peed.Eml.7CF77B69
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 509)
Infecté par: Generic.Peed.Eml.6277048A
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 512)
Infecté par: Generic.Peed.Eml.E473C81A
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 514)
Infecté par: Generic.Peed.Eml.0B96069E
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 530)
Infecté par: Generic.Peed.Eml.0092F140
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 535)
Infecté par: Generic.Peed.Eml.0494A5CB
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 538)
Infecté par: Generic.Peed.Eml.AB0CD9EF
F:\Documents and Settings\xp\Local Settings\Application Data\Identities\{E82D4491-88D9-4E90-8BF3-963B52DB179D}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 540)
Infecté par: Generic.Peed.Eml.3009189A
F:\Downloads\applications\Alcohol120.v1.4.6.(Build.711)-crack.rar=>REGPATCH.EXE
Infecté par: Trojan.Regpat.A
F:\Downloads\applications\IMSI.FLOORPLAN.3D.DESIGN.SUITE.V9.0-TDA.bin=>CRACK/ssg-fp9.exe
Infecté par: Packer.FSG.A
-
ContributeurBonjour Mab24,
on supprime en effet l'infection, si tu prend ceci par exemple
C:\WINDOWS\system32\wpxekrqr.dat
on supprime que wpxekrqr.dat on supprime aussi les clés de lancement
si ensuite plusieurs fichiers on était infectés des nettoyage en ligne font parfaitement ça
ce que tu vas faire
donc Fais un scan antivirus en ligne avec Internet Explorer
https://www.bitdefender.fr/
=> En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
=> Dans la nouvelle fenêtre, clique sur I agree
=> La fenêtre change encore, clique sur Click here to scan
=> Les signatures se chargent, etc.
=> copie colle le résultat ici
tuto en image
http://pageperso.aol.fr/rginformatique/mapage/defender.htm
et
reposte un nouveau rapport hijackthis -
Avast ne me détecte plus le trojan incriminé mais me trouve celui ci en quatre endroits différents : Win32:Obfuscated-BPP [Trj]
Ep44, je comprends que les fichiers supprimés sont des infections, mais j'imagine que l'on supprime, avec les infections, les fichiers infectés ?
A ce stade, je veux te remercier de ton coaching très efficace.
C'est assez impressionnant toutes ces manips sans forcément tout comprendre, et donc faire le pari de la confiance aveugle ! ;) -
et celui de hijack :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:30:12, on 06/01/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp3\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\WINDOWS\System32\sstray.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\WinPortrait\wpctrl.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\BeClean\bca.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\WinPortrait\floater.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.fr.netscape.com/fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.fr.netscape.com/fr/home/winsearch.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.fr.netscape.com/fr/home/winsearch200.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.fr.netscape.com/fr/home/winsearch.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.fr.netscape.com/fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://keyword.fr.netscape.com/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
N1 - Netscape 4: user_pref("browser.startup.homepage", ""); (C:\Program Files\Netscape\Users\jluc\prefs.js)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp3\winampa.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe"
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\System32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\WinPortrait\wpctrl.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [BeClean Start-Up Clean] C:\Program Files\BeClean\BeClean.exe /s
O4 - HKLM\..\Run: [BeClean Agent] C:\Program Files\BeClean\bca.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - https://www.cult3d.com/
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/2328ee0e86968d964622/netzip/RdxIE601_fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/dubos/LOCALS~1/Temp/msohtml1/01/clip_image003.gif
-
Bonjour EP 44
Voici le rapport du scan AVG :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 03:45:41 06/01/2008
+ Résultat de l'analyse:
D:\Downloads\PDA\Jeux pda\[Pocket PC] - Full Cd - Games and Apps\new\StorageCard26.zip/StorageCard26/hpc-StorageCard26.zip/patch.exe -> Backdoor.Theef.111 : Nettoyé.
F:\Downloads\PDA\Jeux pda\[Pocket PC] - Full Cd - Games and Apps\new\StorageCard26.zip/StorageCard26/hpc-StorageCard26.zip/patch.exe -> Backdoor.Theef.111 : Nettoyé.
D:\Downloads\applications\Imsi Floorplan 3D Design Suite v9.0 Incl Keygen-Ssg.rar/setup_pack\keygen.exe -> Heuristic.Win32.Morphine-Crypted : Nettoyé.
F:\Downloads\applications\Imsi Floorplan 3D Design Suite v9.0 Incl Keygen-Ssg.rar/setup_pack\keygen.exe -> Heuristic.Win32.Morphine-Crypted : Nettoyé.
:mozilla.489:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.490:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.858:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.859:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.870:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.871:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.883:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.144:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.145:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.146:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.147:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.148:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.149:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.150:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.151:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.152:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.153:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.154:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.155:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.156:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.157:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.158:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.365:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.369:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.462:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.463:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.464:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.465:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.46:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.532:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.568:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.586:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.609:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.688:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.721:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.865:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.916:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@112.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@karavel.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@maxis.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@snapfish.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.520:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adjuggler : Nettoyé.
:mozilla.521:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adjuggler : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Nettoyé.
:mozilla.161:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.162:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.163:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.164:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.165:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.166:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.148:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.45:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.56:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.57:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.122:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.123:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.124:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.125:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.126:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.138:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.139:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.140:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.141:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.26:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.27:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.28:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.29:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\dubos\Cookies\dubos@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.104:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.255:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.864:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
C:\Documents and Settings\dubos\Cookies\dubos@adviva[1].txt -> TrackingCookie.Adviva : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@adviva[1].txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.193:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.198:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.70:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.778:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Bfast : Nettoyé.
:mozilla.849:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Bfast : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@bfast[1].txt -> TrackingCookie.Bfast : Nettoyé.
:mozilla.39:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.52:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.62:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@www.burstnet[1].txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.761:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Centrport : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@centrport[1].txt -> TrackingCookie.Centrport : Nettoyé.
:mozilla.201:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.202:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.203:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.625:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.627:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.628:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.639:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.642:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.88:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.90:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.91:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.92:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.93:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.94:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.95:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.787:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Connextra : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@connextra[2].txt -> TrackingCookie.Connextra : Nettoyé.
:mozilla.404:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Nettoyé.
:mozilla.142:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.24:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.25:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.20:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.21:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.21:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.687:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\dubos\Cookies\dubos@estat[2].txt -> TrackingCookie.Estat : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@www.etracker[1].txt -> TrackingCookie.Etracker : Nettoyé.
:mozilla.141:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.466:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.467:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.73:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.75:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.833:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.834:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.232:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.315:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.484:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.501:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.519:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.553:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.583:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.852:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.887:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.896:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.912:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.10:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.11:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.178:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.179:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.180:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.20:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.630:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.668:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.695:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.696:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.712:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ehg-atariinc.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ehg-dig.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ehg-finaref.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ehg-gamespot.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ehg-telecomitalia.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ehg-upcchellomedia.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ehg-warnerbrothers.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ehg-youtube.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ehg-yvesrocher.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@hg1.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.343:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.344:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.707:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.796:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.893:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.894:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.134:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.213:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.25:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
F:\Documents and Settings\xp\Cookies\xp@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.517:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Msn : Nettoyé.
:mozilla.518:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Msn : Nettoyé.
:mozilla.519:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Msn : Nettoyé.
:mozilla.523:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Msn : Nettoyé.
:mozilla.573:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Msn : Nettoyé.
:mozilla.575:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Msn : Nettoyé.
:mozilla.577:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Msn : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ie.search.msn[1].txt -> TrackingCookie.Msn : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@search.msn[1].txt -> TrackingCookie.Msn : Nettoyé.
:mozilla.276:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.382:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.115:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.116:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.117:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.37:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.38:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.39:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.71:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\dubos\Cookies\dubos@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@overture[2].txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.572:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Paycounter : Nettoyé.
:mozilla.427:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Planetactive : Nettoyé.
:mozilla.81:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Planetactive : Nettoyé.
:mozilla.846:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.853:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.854:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.857:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.909:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Pro-market : Nettoyé.
:mozilla.910:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Pro-market : Nettoyé.
:mozilla.441:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.442:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.481:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.482:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.534:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
:mozilla.693:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Real : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@france.real[1].txt -> TrackingCookie.Real : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@real[1].txt -> TrackingCookie.Real : Nettoyé.
:mozilla.484:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.486:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.487:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@realmedia[2].txt -> TrackingCookie.Realmedia : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.459:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.483:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@revsci[2].txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.169:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.170:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.171:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.172:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.173:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.174:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.184:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.185:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.186:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.187:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.188:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.189:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.190:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.75:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.76:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.77:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.78:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.79:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.80:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.368:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.609:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.610:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.612:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.807:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.812:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.873:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.875:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.22:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.23:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.24:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.25:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.30:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.31:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.32:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.87:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.89:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.90:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.91:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\dubos\Cookies\dubos@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
F:\Documents and Settings\xp\Cookies\xp@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.135:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.370:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.371:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.372:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.373:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.374:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.375:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.706:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.709:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.710:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.711:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.712:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.713:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.714:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@statcounter[1].txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.20:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.212:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.213:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.23:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.24:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.64:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.66:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.67:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.68:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.69:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.377:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Trafic : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@trafic[1].txt -> TrackingCookie.Trafic : Nettoyé.
:mozilla.408:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.335:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Valueclick : Nettoyé.
:mozilla.338:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Valueclick : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@valueclick[1].txt -> TrackingCookie.Valueclick : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@valueclick[2].txt -> TrackingCookie.Valueclick : Nettoyé.
:mozilla.129:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.130:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.131:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.27:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.28:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.29:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.47:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.50:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\dubos\Cookies\dubos@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
F:\Documents and Settings\xp\Cookies\xp@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.193:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\560rplta.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.206:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.207:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.394:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.546:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.698:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.713:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
C:\Documents and Settings\dubos\Cookies\dubos@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.832:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Yadro : Nettoyé.
:mozilla.847:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.856:F:\Disque local (L)\Documents and Settings\xp f\Application Data\Mozilla\Firefox\Profiles\crkx381v.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.867:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.868:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.869:C:\Documents and Settings\dubos\Application Data\Mozilla\Firefox\Profiles\jfdr827e.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
F:\Disque local (L)\Documents and Settings\xp f\Cookies\xp f@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\QooBox\Quarantine\catchme2008-01-05_ 12949.07.zip/avwavh.dll -> Trojan.BHO.agz : Nettoyé.
D:\WINDOWS\system32\dllcache\hnetmon.dll -> Trojan.Susear.a : Nettoyé.
F:\WINDOWS\WINDOWS\system32\dllcache\hnetmon.dll -> Trojan.Susear.a : Nettoyé.
F:\WINDOWS\system32\dllcache\hnetmon.dll -> Trojan.Susear.a : Nettoyé.
Fin du rapport
- 1
- 2