Problème avec google, virus?
RésoluJ'espère tout d'abord que mon post est bien dans le dossier qui correspond.
Je disais donc: j'ai un problème lorsque je vais sur Google, lorsque je tape une recherche, les résultats s'affichent, mais lorsque je clique sur l'un d'eux, une page publicitaire s'affiche (dailytotal) j'ai Firefox et je suis sous windows xp pro. j'ai vu plusieurs problèmes similaires sur d'autres forums, et on demandait un scan avec hijackthis, c'est ce que j'ai fait. mais les problèmes et les programmes identifiés ne sont pas les même que moi... j'ai donc obtenu le log suivant :
Logfile of HijackThis v1.99.1
Scan saved at 20:49:04, on 05/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Running processes:
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Antivirus\aswUpdSv.exe
C:\Program Files\Antivirus\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRA~1\ANTIVI~1\ashDisp.exe
C:\Program Files\Antivirus\ashWebSv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PartyGaming\PartyGaming.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Hijackthis\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http:///???*??Q???????*???7
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,setup32.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [OlStatusMon] "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize
O4 - HKLM\..\Run: [MaBtSh] C:\Program Files\Mobile Action\Bluetooth Manager\MaBtSh.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\Nvc\BIN\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [qatdnzw] c:\windows\system32\qatdnzw.exe qatdnzw
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ANTIVI~1\ashDisp.exe
O4 - HKLM\..\RunServices: [Microsoftf DDEs ContrDL] runm.pif
O4 - HKCU\..\Run: [Steam] "E:\APPS\steam\Steam.exe" -silent
O4 - HKCU\..\Run: [lzkusdbyzv] c:\windows\system32\lzkusdbyzv.exe lzkusdbyzv
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O17 - HKLM\System\CCS\Services\Tcpip\..\{316C3D62-8D7D-45D4-93A5-FA3A32975D0E}: NameServer = 85.255.115.156,85.255.112.172
O17 - HKLM\System\CCS\Services\Tcpip\..\{38D51EDA-06D9-433A-BA2D-704570C112F7}: NameServer = 85.255.115.156,85.255.112.172
O17 - HKLM\System\CCS\Services\Tcpip\..\{B3E3C845-A887-4E4C-B0FA-06F68BAE89B1}: NameServer = 85.255.115.156,85.255.112.172
O17 - HKLM\System\CCS\Services\Tcpip\..\{C8EAC354-0081-4636-AE10-4EA18410D7FF}: NameServer = 85.255.115.156,85.255.112.172
O17 - HKLM\System\CCS\Services\Tcpip\..\{D3897345-CD62-49F7-9EAD-0624B5011933}: NameServer = 85.255.115.156,85.255.112.172
O17 - HKLM\System\CCS\Services\Tcpip\..\{E77DF721-9540-4FC8-91F3-B0F291E29569}: NameServer = 85.255.115.156,85.255.112.172
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.156 85.255.112.172
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.156 85.255.112.172
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Antivirus\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Antivirus\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Antivirus\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Antivirus\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Nvc\BIN\Zanda.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\System32\nvsvc32.exe (file missing)
O23 - Service: olMntrService - Olivetti - C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
O23 - Service: Pptp55islnt - Unknown owner - (no file)
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - d:\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - d:\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
en espérant que vous puissiez m'apporter votre aide.
merci!
Configuration: Windows XP Firefox 2.0.0.11
32 réponses
Le problème décrit est que les résultats Google s'affichent correctement mais, en cliquant sur un lien, une page publicitaire s'ouvre (dailytotal) sous Firefox sur Windows XP Pro. Plusieurs éléments remontent dans les analyses: des barres d'outils et composants malveillants (BHO, modules ActiveX) détectés par HijackThis, et un scan Kaspersky Online Scanner signale plusieurs objets infectés. Des logs révèlent un mélange de processus légitimes et de services tiers (avast!, Kerio, iPod Service), de multiples entrées Run et Startup, et des noms d'hôtes variés indiquant une infection étendue. En pratique, les solutions consistent en une élimination des éléments autorun suspects, l'utilisation d'antivirus et de nettoyeurs en mode avancé, puis une révision des paramètres réseau et des extensions intrusives.
-
Contributeur sécuritéContent d'avoir pu être utile. Et prudence sur le net !
FillPCA -
hébien merci infiniement monsieur!
je suis bien content de m'etre enfin débarassé de toutes ces infections, et en effet, je trouve que mon ordi est un peu plus rapide maintenant! c'est super! merci!! -
Contributeur sécuritéRe,
Ce n'est pas grave.
Tu as un vieil Email à supprimer : regarde la date :
F:\restore\backup.pst/Dossiers personnels/Éléments supprimés/06 May 2005 18:32 from register@hotmail.com:Registration Confirm/account_info-text.zip
Il faut aussi supprimer cela :
C:\Documents and Settings\theo\Application Data\vmntoolbar\vmntoolbar_151.zip
C:\Program Files\Visicom Media\FTP Expert 3\vmntoolbar\vmntoolbarsetup.exe
E:\APPS\codec\DivXPro502GAINBundle.exe
F:\Mes documents\Disquette hack a domicile\mailpv.zip
1/ Il est fortement recommandé d'avoir tous ses logiciels de sécurité à jour, afin d'éviter les failles par lesquelles s'engouffrent les infections.
2/ Tu peux supprimer tous les logiciels que nous avons utilisés (Type: SmitFraufix, Blacklight, SDFix, lopxpMH, ect.....) qui traitent des infections spécifiques et qui sont mis à jour régulièrement. Il est inutile de les garder sur ton PC.
Tu peux par contre, garder AVG Antispyware et CCleaner.
3/ /!\ Maintenant que ton PC n'est plus infecté, désactive puis réactive ta "Restauration du système" afin de créer un point de restauration sain.
Pour désactiver ou activer la Restauration du système, tu dois ouvrir une session Administrateur sous Windows XP.
Désactivation:
Cliquer droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > cocher la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer et Ok.
Activation:
Suivre le même chemin ; décocher la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer et Ok. Redémarrer l'ordinateur.
Comment faire pour...(lettre A): https://forum.pcastuces.com/sujet.asp?f=25&s=3902
4/ Pour améliorer la sécurité de ton PC prend quelques instants pour lire:
Sécuriser son PC +WIFI (versions "hot" & "light"): https://forum.pcastuces.com/default.asp
5/ Dénonce ton infection pour faire condamner les auteurs.
Crée un message pour faire avancer les choses sur Malware-Complaints, nous devons être les plus nombreux possibles, alors rends compte de ton infection :
- Voir les règles du forum : https://malwarecomplaints.info/
- Après t'être enregistré à l'aide du bouton en haut se nommant "Register"
Si tu as plus de 13 ans, choisir : "I Agree to these terms and am over or exactly 13 years of age"
Si tu as moins, clique sur : "I Agree to these terms and am under 13 years of age"
Tu as alors, sous forme de liste, un sujet par type d'infection (Look2Me, Smitfraud, SpywareQuake etc..).
*** Tes infections : Navipromo, Wareout, divers vers ***
>> https://malwarecomplaints.info/
Si le malware que tu as eu n'apparaît pas dans la liste, ou si tu ne sais pas par quoi tu étais infecté(e), crée un message dans le sujet Autres infections, conforme au règle du forum (âge, ville, département etc..)
Indique aussi le nom du Forum qui t'a aidé : CCM
6/ Tu peux marquer ton sujet comme résolu en cliquant sur le bouton.
7/ Je te conseille enfin de défragmenter ton PC : http://www.coupdepoucepc.com/modules/news/article.php?storyid=218
Bon surf !
FillPCA -
je croi que je suis un boulet... j'ai pas sauvegardé le rapport de A.Rothstein :s, j'espère que c'est pas trop grave...
sinon, j'ai celui de kapersky:
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, February 10, 2008 9:13:16 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 10/02/2008
Kaspersky Anti-Virus database records: 556064
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
H:\
Scan Statistics:
Total number of scanned objects: 105150
Number of viruses found: 5
Number of infected objects: 10
Number of suspicious objects: 0
Duration of the scan process: 01:16:33
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\helene\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\rogerknocker@hotmail.com\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\rogerknocker@hotmail.com\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\rogerknocker@hotmail.com\SharingMetadata\Working\database_E8DC_B63D_DCB6_63A\dfsr.db Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\rogerknocker@hotmail.com\SharingMetadata\Working\database_E8DC_B63D_DCB6_63A\fsr.log Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\rogerknocker@hotmail.com\SharingMetadata\Working\database_E8DC_B63D_DCB6_63A\fsrtmp.log Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\rogerknocker@hotmail.com\SharingMetadata\Working\database_E8DC_B63D_DCB6_63A\tmp.edb Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Windows Live Contacts\rogerknocker@hotmail.com\real\members.stg Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Windows Live Contacts\rogerknocker@hotmail.com\shadow\members.stg Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Historique\History.IE5\MSHist012008021020080211\index.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Temp\~DF6C34.tmp Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Temp\~DF6C4E.tmp Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Temp\~DF8255.tmp Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Temp\~DF826A.tmp Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\helene\ntuser.dat Object is locked skipped
C:\Documents and Settings\helene\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\helene\UserData\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\theo\Application Data\vmntoolbar\vmntoolbar_151.zip/vmntoolbar.dll Infected: not-a-virus:AdWare.Win32.MegaSearch.j skipped
C:\Documents and Settings\theo\Application Data\vmntoolbar\vmntoolbar_151.zip ZIP: infected - 1 skipped
C:\Program Files\Antivirus\DATA\aswResp.dat Object is locked skipped
C:\Program Files\Antivirus\DATA\Avast4.db Object is locked skipped
C:\Program Files\Antivirus\DATA\log\AshWebSv.ws Object is locked skipped
C:\Program Files\Antivirus\DATA\log\nshield.log Object is locked skipped
C:\Program Files\Antivirus\DATA\report\Protection résidente.txt Object is locked skipped
C:\Program Files\PartyGaming\PartyPoker\1346657.hhf Object is locked skipped
C:\Program Files\PartyGaming\PartyPoker\6087403.hhf Object is locked skipped
C:\Program Files\PartyGaming\PartyPoker\HandHistory\kadajkgc\20080210\Western European $150 Freeroll Speed (1325671) - Table n°119_1346657.txt Object is locked skipped
C:\Program Files\Visicom Media\FTP Expert 3\vmntoolbar\vmntoolbarsetup.exe/data0146 Infected: not-a-virus:AdWare.Win32.BHO.w skipped
C:\Program Files\Visicom Media\FTP Expert 3\vmntoolbar\vmntoolbarsetup.exe NSIS: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_468.dat Object is locked skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
E:\APPS\codec\DivXPro502GAINBundle.exe/Gain_Trickler.exe Infected: not-a-virus:AdWare.Win32.Gator.3202 skipped
E:\APPS\codec\DivXPro502GAINBundle.exe Vise: infected - 1 skipped
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\Mes documents\Disquette hack a domicile\mailpv.zip/mailpv.exe Infected: Backdoor.Win32.Prorat.19.p skipped
F:\Mes documents\Disquette hack a domicile\mailpv.zip ZIP: infected - 1 skipped
F:\restore\backup.pst/Dossiers personnels/Éléments supprimés/06 May 2005 18:32 from register@hotmail.com:Registration Confirm/account_info-text.zip Infected: Email-Worm.Win32.Sober.p skipped
F:\restore\backup.pst Mail MS Mail: infected - 1 skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
Scan process completed.
et celui de hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:21:14, on 10/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Antivirus\aswUpdSv.exe
C:\Program Files\Antivirus\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe
C:\Program Files\Mobile Action\Bluetooth Manager\MaBtSh.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ANTIVI~1\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Antivirus\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [OlStatusMon] "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize
O4 - HKLM\..\Run: [MaBtSh] C:\Program Files\Mobile Action\Bluetooth Manager\MaBtSh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ANTIVI~1\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Steam] "E:\APPS\steam\Steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/71365/kavwebscan_unicode.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Antivirus\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Antivirus\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Antivirus\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Antivirus\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\System32\nvsvc32.exe (file missing)
O23 - Service: olMntrService - Olivetti - C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
O23 - Service: Pptp55islnt - Unknown owner - (no file)
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - d:\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - d:\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
-
Contributeur sécuritéSalut,
1/ Ouvre HIjackthis>"Do a scan only" et coche ceci :
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http:///???*??Q???????*???7
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http:///???*??Q???????*???7
O4 - HKLM\..\RunServices: [Microsoftf DDEs ContrDL] runm.pif
O23 - Service: Pptp55islnt - Unknown owner - (no file)
Clique sur fix/réparer.
2/ Ouvre Ccleaner et clique sur "lancer le nettoyage".
3/ * Télécharge Toolscleaner de A.Rothstein sur ton Bureau : http://a-rothstein.changelog.fr/TC/ToolsCleaner2.exe
* Double-clique sur ToolsCleaner2.exe>Recherche puis Suppression,
* Ton Bureau va disparaître. Ceci est normal.
* S'il ne réapparait pas, fais ceci : CTRL+ALT+SUP pour faire apparaître le gestionnaire de tâches.
Rends-toi à l'onglet Processus, clique en haut à gauche sur "Fichiers" et choisis "Exécuter". Tape "explorer" et valide. Cela te fera ré-apparaître ton Bureau. Edite ce rapport.
4/ Refais un scan en ligne avec Kaspersky, mais choisis "My computer".
5/ Edite le rapport Toolscleaner, Kaspersky et un nouveau rapport Hijackthis.
FillPCA -
voila le log SDFix:
SDFix: Version 1.139
Run by helene on 09/02/2008 at 14:27
Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix
Safe Mode:
Checking Services:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Normal Mode:
Checking Files:
Trojan Files Found:
C:\WINDOWS\system32\TFTP272 - Deleted
C:\WINDOWS\system32\o - Deleted
Removing Temp Files...
ADS Check:
Final Check:
catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-09 14:32:18
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile"=str(2):"c:\windows\system32\ESENT.dll"
"CategoryMessageFile"=str(2):"c:\windows\system32\ESENT.dll"
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 18
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
Remaining Files:
---------------
File Backups: - C:\SDFix\backups\backups.zip
Files with Hidden Attributes:
Fri 1 Jul 2005 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue 5 Jun 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sat 13 Nov 2004 37,376 A..H. --- "C:\Program Files\Fichiers communs\Adobe\ESD\DLMCleanup.exe"
Finished!
hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 14:39:55, on 09/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Antivirus\aswUpdSv.exe
C:\Program Files\Antivirus\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Antivirus\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe
C:\Program Files\Mobile Action\Bluetooth Manager\MaBtSh.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ANTIVI~1\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Hijackthis\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http:///???*??Q???????*???7
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http:///???*??Q???????*???7
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [OlStatusMon] "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize
O4 - HKLM\..\Run: [MaBtSh] C:\Program Files\Mobile Action\Bluetooth Manager\MaBtSh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ANTIVI~1\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [Microsoftf DDEs ContrDL] runm.pif
O4 - HKCU\..\Run: [Steam] "E:\APPS\steam\Steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/71365/kavwebscan_unicode.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Antivirus\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Antivirus\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Antivirus\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Antivirus\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\System32\nvsvc32.exe (file missing)
O23 - Service: olMntrService - Olivetti - C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
O23 - Service: Pptp55islnt - Unknown owner - (no file)
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - d:\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - d:\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -
Contributeur sécuritéSalut,
Combofix a bien travaillé. Il reste encore une infection visible.
# Télécharge SDFix (créé par Andy Manchesta) et sauvegarde le sur ton Bureau : http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
# Imprime ceci.
# Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
* Redémarre ton ordinateur.
* Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (ou F5).
* A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
* Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
* Choisis ton compte.
# Déroule la liste des instructions ci-dessous :
* En mode sans échec, double-clique sur le fichier SDFix.exe et clique sur install,
* Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
* Appuie sur Y pour commencer le script.
* Il va supprimer les services de certains trojans, effectuera aussi quelques réparations du Registre et il te demandera d'appuyer sur une touche pour redémarrer.
* Appuie sur une touche pour redémarrer le PC.
* Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
* Après le chargement du Bureau, l'outil terminera son travail et affichera Finished
* Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
* Enfin, ouvre le dossier de SDFix sur ton Bureau et copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !
FillPCA -
voila le log avec combofix :
ComboFix 08-02.05.3 - helene 2008-02-09 11:46:22.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.178 [GMT 1:00]
Endroit: C:\Documents and Settings\helene\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.
[i] ADS - svchost.exe: deleted 36 bytes in 1 streams. [/i]
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
C:\WINDOWS\system32\wl.exe
----- BITS: Possible sites infect‚s -----
hxxp://www.download.windowsupdate.com
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\LEGACY_MSDIRECTX
-------\poof
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-01-09 to 2008-02-09 ))))))))))))))))))))))))))))))))))))
.
2008-02-06 13:27 . 2008-02-06 13:27 <REP> d-------- C:\WINDOWS\Documalis Free Scanner 1.0
2008-02-06 13:11 . 2008-02-06 13:11 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-02-06 13:11 . 2008-02-06 13:11 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-02-06 00:15 . 2008-02-06 00:15 <REP> d-------- C:\WINDOWS\system32\fr-fr
2008-02-06 00:13 . 2008-02-06 00:14 1,355 --a------ C:\WINDOWS\imsins.BAK
2008-02-06 00:12 . 2008-02-06 00:12 <REP> d--h----- C:\WINDOWS\$hf_mig$
2008-02-05 23:19 . 2008-02-05 23:19 <REP> d-------- C:\Documents and Settings\helene\Application Data\Grisoft
2008-02-05 23:19 . 2008-02-05 23:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-02-05 23:19 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-02-05 23:17 . 2008-02-05 23:17 <REP> d-------- C:\Program Files\CCleaner
2008-02-05 22:22 . 2008-02-05 22:22 10,960,186 --a------ C:\upload_moi_COOL.tar.gz
2008-02-05 22:11 . 2008-02-05 22:16 <REP> d-------- C:\fixwareout
2008-02-05 21:32 . 2008-02-05 23:00 <REP> d-------- C:\Program Files\Navilog1
2008-02-05 20:46 . 2008-02-08 19:35 <REP> d-------- C:\Hijackthis
2008-01-23 21:19 . 2008-02-05 22:46 <REP> d-------- C:\Program Files\PokerStars.NET
2008-01-21 20:28 . 2008-01-21 20:28 <REP> d-------- C:\Program Files\ffdshow
2008-01-21 20:28 . 2006-03-11 04:56 438,272 --a------ C:\WINDOWS\system32\Mpeg2DecFilter.ax
2008-01-21 20:28 . 2005-11-25 21:46 421,888 --a------ C:\WINDOWS\system32\RealMediaSplitter.ax
2008-01-21 20:28 . 2004-03-09 00:00 224,016 --a------ C:\WINDOWS\system32\tabctl32.ocx
2008-01-21 20:28 . 2008-01-15 18:35 60,273 --a------ C:\WINDOWS\system32\pthreadGC2.dll
2008-01-21 20:28 . 2008-01-15 18:35 7,680 --a------ C:\WINDOWS\system32\ff_vfw.dll
2008-01-21 20:28 . 2008-01-15 18:35 547 --a------ C:\WINDOWS\system32\ff_vfw.dll.manifest
2008-01-21 20:28 . 2005-06-21 17:48 1 --a------ C:\WINDOWS\gamidnof.lnl
2008-01-14 18:38 . 2008-01-14 18:38 <REP> d-------- C:\WINDOWS\Sun
2008-01-10 20:16 . 2008-01-10 20:16 372 --a------ C:\WINDOWS\datalink.ini
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-09 02:50 --------- d-----w C:\Documents and Settings\helene\Application Data\SolidDocuments
2008-02-05 22:18 --------- d-----w C:\Program Files\GetRight
2008-01-26 09:46 --------- d-----w C:\Program Files\Winamp
2008-01-21 18:10 --------- d-----w C:\Program Files\pspvideo9
2008-01-16 17:45 --------- d-----w C:\Program Files\PartyGaming
2008-01-11 14:21 --------- d-----w C:\Program Files\DivX
2008-01-09 14:22 --------- d-----w C:\Program Files\Antivirus
2008-01-07 20:08 --------- d-----w C:\Program Files\Fichiers communs\Softwin
2008-01-06 11:24 50,918 ----a-w C:\WINDOWS\system32\drivers\fwdrv.err
2008-01-01 23:47 --------- d-----w C:\Program Files\MSN Messenger
2008-01-01 23:47 --------- d-----w C:\Program Files\Messenger Plus! Live
2007-12-31 17:55 --------- d-----w C:\Program Files\iTunes
2007-12-31 17:55 --------- d-----w C:\Program Files\iPod
2007-12-31 17:54 --------- d-----w C:\Program Files\QuickTime
2007-12-31 17:53 --------- d-----w C:\Program Files\Apple Software Update
2007-12-31 17:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple
2006-09-20 10:07 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="E:\APPS\steam\Steam.exe" [2007-11-30 07:00 1266936]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 00:09 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio"="cmicnfg.cpl" []
"OlStatusMon"="C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" [2006-07-26 15:20 106496]
"MaBtSh"="C:\Program Files\Mobile Action\Bluetooth Manager\MaBtSh.exe" [2006-02-08 16:29 24576]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-12-11 10:56 286720]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-12-11 12:10 267048]
"avast!"="C:\PROGRA~1\ANTIVI~1\ashDisp.exe" [2007-12-04 14:00 79224]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Microsoftf DDEs ContrDL"="runm.pif" []
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"= 0 (0x0)
R2 olMntrService;olMntrService;"C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe" [2006-07-24 11:02]
R3 cmudax;C-Media High Definition Audio Interface;C:\WINDOWS\system32\drivers\cmudax.sys [2004-07-28 09:06]
R3 ICAM8USB;Intel(r) PC Camera CS120;C:\WINDOWS\system32\Drivers\Icm8D2.SYS [2001-07-12 11:23]
R3 Ma730Pt;MA730 Bluetooth VCOM Driver;C:\WINDOWS\system32\DRIVERS\Ma730Pt.sys [2006-09-21 11:23]
R3 Ma730Vad;MA730 Bluetooth Audio;C:\WINDOWS\system32\DRIVERS\Ma730Vad.sys [2005-11-22 13:32]
S3 Ma730c;MA730 Bluetooth Core Driver;C:\WINDOWS\system32\DRIVERS\MA730C.sys [2007-01-08 14:06]
S3 PPPoEWin;PPPoEWin Miniport;C:\WINDOWS\system32\DRIVERS\PPPoEWin.SYS []
S3 SE2Ebus;Sony Ericsson Device 046 Driver driver (WDM);C:\WINDOWS\system32\DRIVERS\SE2Ebus.sys [2006-05-01 12:16]
S3 SE2Emdfl;Sony Ericsson Device 046 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\SE2Emdfl.sys [2006-05-01 12:17]
S3 SE2Emdm;Sony Ericsson Device 046 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\SE2Emdm.sys [2006-05-01 12:17]
S3 SE2Emgmt;Sony Ericsson Device 046 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\SE2Emgmt.sys [2006-05-01 12:18]
S3 se2End5;Sony Ericsson Device 046 USB Ethernet Emulation SEMC46 (NDIS);C:\WINDOWS\system32\DRIVERS\se2End5.sys [2006-05-01 12:15]
S3 SE2Eobex;Sony Ericsson Device 046 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\SE2Eobex.sys [2006-05-01 12:18]
S3 se2Eunic;Sony Ericsson Device 046 USB Ethernet Emulation SEMC46 (WDM);C:\WINDOWS\system32\DRIVERS\se2Eunic.sys [2006-05-01 12:15]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 06:58]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 07:08]
S3 zlportio;zlportio;C:\Documents and Settings\theo\Bureau\zlportio.sys []
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5e466c90-463b-11db-8491-806d6172696f}]
\Shell\AutoRun\command - G:\Setup.exe
.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-02-06 09:38:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-09 11:50:53
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cach‚s ...
Balayage cach‚ autostart entries ...
Balayage des fichiers cach‚s ...
Scan termin‚ avec succŠs
Les fichiers cach‚s: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Antivirus\aswUpdSv.exe
C:\Program Files\Antivirus\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Antivirus\ashWebSv.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-02-09 11:54:03 - machine was rebooted
ComboFix-quarantined-files.txt 2008-02-09 10:53:58
.
2008-01-07 19:46:33 --- E O F ---
et le nouveau avec Hijachthis:
Logfile of HijackThis v1.99.1
Scan saved at 11:54:50, on 09/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Antivirus\aswUpdSv.exe
C:\Program Files\Antivirus\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Antivirus\ashWebSv.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe
C:\Program Files\Mobile Action\Bluetooth Manager\MaBtSh.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ANTIVI~1\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Hijackthis\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http:///???*??Q???????*???7
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http:///???*??Q???????*???7
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [OlStatusMon] "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize
O4 - HKLM\..\Run: [MaBtSh] C:\Program Files\Mobile Action\Bluetooth Manager\MaBtSh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ANTIVI~1\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [Microsoftf DDEs ContrDL] runm.pif
O4 - HKCU\..\Run: [Steam] "E:\APPS\steam\Steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/71365/kavwebscan_unicode.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Antivirus\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Antivirus\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Antivirus\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Antivirus\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\System32\nvsvc32.exe (file missing)
O23 - Service: olMntrService - Olivetti - C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
O23 - Service: Pptp55islnt - Unknown owner - (no file)
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - d:\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - d:\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -
Contributeur sécuritéSalut,
Peux-tu faire ceci ?
* Télécharge combofix.exe (par sUBs) sur ton Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
* Double clique combofix.exe et suis les invites.
* Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
edite aussi un nouveau rapport Hijackthis.
FillPCA
-
et voila le nouveau log hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 20:12:15, on 07/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Antivirus\aswUpdSv.exe
C:\Program Files\Antivirus\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe
C:\Program Files\Mobile Action\Bluetooth Manager\MaBtSh.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ANTIVI~1\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Hijackthis\VERSION TRADUITE ORIGINALE.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http:///???*??Q???????*???7
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http:///???*??Q???????*???7
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [OlStatusMon] "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize
O4 - HKLM\..\Run: [MaBtSh] C:\Program Files\Mobile Action\Bluetooth Manager\MaBtSh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ANTIVI~1\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [Microsoftf DDEs ContrDL] runm.pif
O4 - HKCU\..\Run: [Steam] "E:\APPS\steam\Steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/71365/kavwebscan_unicode.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Antivirus\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Antivirus\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Antivirus\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Antivirus\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\System32\nvsvc32.exe (file missing)
O23 - Service: olMntrService - Olivetti - C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
O23 - Service: Pptp55islnt - Unknown owner - (no file)
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - d:\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - d:\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
alors, c'est grave docteur? -
voila!! enfin j'ai réeussi a ateindre le rapport et a le sauvegarder! désolé pour l'atente :s
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, February 07, 2008 8:10:32 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 7/02/2008
Kaspersky Anti-Virus database records: 553461
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
H:\
Scan Statistics:
Total number of scanned objects: 120202
Number of viruses found: 6
Number of infected objects: 11
Number of suspicious objects: 0
Duration of the scan process: 01:31:39
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cert8.db Object is locked skipped
C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\history.dat Object is locked skipped
C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\key3.db Object is locked skipped
C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\parent.lock Object is locked skipped
C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\search.sqlite Object is locked skipped
C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\helene\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\naiscamboulive@hotmail.com\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\naiscamboulive@hotmail.com\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\naiscamboulive@hotmail.com\SharingMetadata\Working\database_E8DC_B63D_DCB6_63A\dfsr.db Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\naiscamboulive@hotmail.com\SharingMetadata\Working\database_E8DC_B63D_DCB6_63A\fsr.log Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\naiscamboulive@hotmail.com\SharingMetadata\Working\database_E8DC_B63D_DCB6_63A\fsrtmp.log Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Messenger\naiscamboulive@hotmail.com\SharingMetadata\Working\database_E8DC_B63D_DCB6_63A\tmp.edb Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Windows Live Contacts\naiscamboulive@hotmail.com\real\members.stg Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Microsoft\Windows Live Contacts\naiscamboulive@hotmail.com\shadow\members.stg Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\Cache\1D539CD2d01 Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Temp\~DFD42C.tmp Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Temp\~DFD438.tmp Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Temp\~DFE4E6.tmp Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Temp\~DFE4FC.tmp Object is locked skipped
C:\Documents and Settings\helene\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\helene\ntuser.dat Object is locked skipped
C:\Documents and Settings\helene\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\theo\Application Data\vmntoolbar\vmntoolbar_151.zip/vmntoolbar.dll Infected: not-a-virus:AdWare.Win32.MegaSearch.j skipped
C:\Documents and Settings\theo\Application Data\vmntoolbar\vmntoolbar_151.zip ZIP: infected - 1 skipped
C:\Program Files\Antivirus\DATA\aswResp.dat Object is locked skipped
C:\Program Files\Antivirus\DATA\Avast4.db Object is locked skipped
C:\Program Files\Antivirus\DATA\log\nshield.log Object is locked skipped
C:\Program Files\Navilog1\Backupnavi\qcxxkx.exe Infected: not-a-virus:AdWare.Win32.NaviPromo.gen skipped
C:\Program Files\Visicom Media\FTP Expert 3\vmntoolbar\vmntoolbarsetup.exe/data0146 Infected: not-a-virus:AdWare.Win32.BHO.w skipped
C:\Program Files\Visicom Media\FTP Expert 3\vmntoolbar\vmntoolbarsetup.exe NSIS: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{1FDF65CB-1E7B-4E53-8B5E-14A5800D1E4F}\RP650\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_460.dat Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\mes documents\helene\Mes Historiques de Conversation\février 2008\soul_lost@hotmail.fr.html Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
E:\APPS\codec\DivXPro502GAINBundle.exe/Gain_Trickler.exe Infected: not-a-virus:AdWare.Win32.Gator.3202 skipped
E:\APPS\codec\DivXPro502GAINBundle.exe Vise: infected - 1 skipped
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\Mes documents\Disquette hack a domicile\mailpv.zip/mailpv.exe Infected: Backdoor.Win32.Prorat.19.p skipped
F:\Mes documents\Disquette hack a domicile\mailpv.zip ZIP: infected - 1 skipped
F:\restore\backup.pst/Dossiers personnels/Éléments supprimés/06 May 2005 18:32 from register@hotmail.com:Registration Confirm/account_info-text.zip Infected: Email-Worm.Win32.Sober.p skipped
F:\restore\backup.pst Mail MS Mail: infected - 1 skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
Scan process completed. -
Contributeur sécuritéRe,
Tu dois avoir un bouton "report save" normalement. Essaie de préférence une sauvegarde en mode texte.
FillPCA -
ca y est, je vien de rentrer, le scan est finit mais j'arrive pas a sauvegarder le rapport...
-
Contributeur sécuritéRe,
Le scan est long, mais le pourcentage n'est pas toujours révélateur de l'avancement.
FillPCA -
bon, le scan est lancé depuis 1h déja et on en est qu'à 20%...
-
bon, je vais me coucher, je ferais le scan avec kapersky demain, j'espère que ca ira :)
merci en tout cas pour tout -
voici le rapport AVG tout frais.
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 23:58:51 05/02/2008
+ Résultat de l'analyse:
HKLM\SOFTWARE\Classes\MEDIATICKETSINSTALLER.MediaTicketsInstallerCtrl.1 -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\MediaAccess.Installer -> Adware.WinAd : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\MediaAccess.Installer\CLSID -> Adware.WinAd : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Classes\MediaAccess.Installer\CurVer -> Adware.WinAd : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Media Access -> Adware.WinAD : Nettoyé et sauvegardé (mise en quarantaine).
F:\Mes documents\Disquette hack a domicile\mailpv.zip/mailpv.exe -> Not-A-Virus.PSWTool.Win32.MailPassView : Erreur lors du nettoyage.
:mozilla.325:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.326:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.328:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.329:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.330:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.331:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.375:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.376:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.378:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.379:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.84:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.121:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.122:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.165:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.166:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.167:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.210:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.212:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.294:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.34:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.35:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.37:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.46:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.47:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.548:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.552:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.579:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.583:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.656:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.681:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.705:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.726:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.90:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\nais\Cookies\nais@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\nais\Cookies\nais@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.158:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.159:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.805:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.806:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.807:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.808:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.809:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.810:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.811:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.825:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.826:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.827:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.828:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.829:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.830:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.831:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.138:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.139:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.284:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.285:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.334:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.335:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.61:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.63:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.10:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.11:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.122:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.123:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.124:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.125:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.12:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.211:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.214:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.215:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.216:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.217:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.22:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.23:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.24:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.289:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.290:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.291:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.292:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.91:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.95:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.96:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.97:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.98:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.9:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.196:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.152:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.247:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.25:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.30:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.6:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.99:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\theo\Cookies\theo@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.106:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.153:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.174:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.188:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.42:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.43:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.59:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.90:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.146:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.147:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.119:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.573:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.574:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.575:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.576:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.577:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.603:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.604:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.605:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.606:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.607:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.650:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.676:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.769:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.789:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.37:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Clickhype : Nettoyé.
:mozilla.100:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.101:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.102:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.103:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.218:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.219:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.220:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.221:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.222:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.323:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.324:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.325:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.99:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.698:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Dealtime : Nettoyé.
:mozilla.719:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Dealtime : Nettoyé.
:mozilla.106:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.127:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.14:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.15:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.41:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.52:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.56:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.109:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.18:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.34:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.44:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.57:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\jo\Cookies\jo@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.115:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.192:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.193:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.194:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.195:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.266:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.267:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.205:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.265:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.342:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.344:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.411:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.444:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.660:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.685:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.82:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.89:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.236:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.237:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.820:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.821:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.822:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.824:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.840:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.841:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.842:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.844:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.103:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Hotlog : Nettoyé.
:mozilla.152:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.153:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.287:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.288:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.59:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.60:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.747:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.748:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.767:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.768:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Imrworldwide : Nettoyé.
C:\Documents and Settings\nais\Cookies\nais@searchportal.information[2].txt -> TrackingCookie.Information : Nettoyé.
:mozilla.214:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Ivwbox : Nettoyé.
:mozilla.593:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.623:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.124:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.75:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.77:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.96:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.97:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.98:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\nais\Cookies\nais@ie.search.msn[1].txt -> TrackingCookie.Msn : Nettoyé.
C:\Documents and Settings\nais\Cookies\nais@search.msn[2].txt -> TrackingCookie.Msn : Nettoyé.
:mozilla.212:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.105:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.107:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.108:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.146:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.68:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.69:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.80:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.81:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\nais\Cookies\nais@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.59:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Popularix : Nettoyé.
:mozilla.764:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.765:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.784:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.785:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.150:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.772:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.792:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.700:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.701:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.702:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.703:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.704:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.721:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.722:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.723:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.724:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.725:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.132:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.133:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.134:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.135:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.136:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.137:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.147:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.148:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.149:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.150:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.151:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.152:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.289:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.290:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.291:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.292:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.293:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.294:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.339:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.340:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.341:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.342:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.343:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.344:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.76:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.77:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.78:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.79:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.80:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.81:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.82:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.283:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.284:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.315:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.316:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.365:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.366:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.180:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Skype : Nettoyé.
:mozilla.181:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Skype : Nettoyé.
:mozilla.254:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Skype : Nettoyé.
:mozilla.255:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Skype : Nettoyé.
:mozilla.13:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.14:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.17:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.50:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.52:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.52:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.53:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.53:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.54:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.87:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.88:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.88:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.89:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.89:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.90:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.91:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.92:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.93:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.94:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.95:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\theo\Cookies\theo@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.831:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Spylog : Nettoyé.
:mozilla.851:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Spylog : Nettoyé.
:mozilla.260:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.372:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.373:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.374:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.375:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.44:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.45:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.46:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.47:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.48:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.116:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.117:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.118:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.159:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.160:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.161:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.163:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.171:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.172:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.27:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.28:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.29:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.31:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.62:C:\Documents and Settings\WILLY\Application Data\Mozilla\Firefox\Profiles\oaecbdez.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.91:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.92:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.94:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.66:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Trafic : Nettoyé.
:mozilla.246:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.730:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.94:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.722:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Vegasred : Nettoyé.
:mozilla.743:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Vegasred : Nettoyé.
:mozilla.101:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.102:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.103:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.119:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.120:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.121:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.154:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.63:C:\Documents and Settings\nais\Application Data\Mozilla\Firefox\Profiles\9yyv0vr1.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.87:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.88:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.89:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\theo\Cookies\theo@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.506:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.537:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.68:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Yadro : Nettoyé.
:mozilla.711:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Yadro : Nettoyé.
:mozilla.712:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Yadro : Nettoyé.
:mozilla.732:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Yadro : Nettoyé.
:mozilla.733:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Yadro : Nettoyé.
:mozilla.344:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.345:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.346:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.368:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.369:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.370:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.38:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.39:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.40:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.90:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.93:C:\Documents and Settings\theo\Application Data\Mozilla\Firefox\Profiles\j8q2gjhs.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\nais\Cookies\nais@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.193:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.194:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-3.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.301:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.306:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.307:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.308:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.309:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.310:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-1.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.351:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.356:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.357:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.358:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.359:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.360:C:\Documents and Settings\helene\Application Data\Mozilla\Firefox\Profiles\0y0ikll4.default\cookies-2.txt -> TrackingCookie.Zedo : Nettoyé.
Fin du rapport -
en atendant le scan par avg, j'ai une question:
pour le moment j'ai Avast! antivirus, esqu'il existe un meilleur antivirus gratuit? -
voila mon raport avec BFU:
BFU v1.10.0
Windows XP SP2 (WinNT 5.01.2600 SP2)
Script started at 23:10:56, on 05/02/2008
Option Unload Explorer: Yes
Failed: ServiceStop Norman ZANDA (service not found)
Failed: ServiceDisable Norman ZANDA (service not found)
Failed: ServiceDelete Norman ZANDA (service not found)
Failed: ServiceStop Pptp55islnt (service not found)
Failed: ServiceDisable Pptp55islnt (service not found)
Failed: ServiceDelete Pptp55islnt (service not found)
Failed: FolderDelete C:\Program Files\Media Access (folder not found)
Failed: FolderDelete C:\Norman (folder not found)
Failed: FileDelete C:\DOCUME~1\helene\LOCALS~1\Temp\~DFA0E3.tmp (operation failed)
Failed: FileDelete C:\DOCUME~1\helene\LOCALS~1\Temp\~DFA322.tmp (operation failed)
Failed: FileDelete C:\DOCUME~1\helene\LOCALS~1\Temp\~DFA785.tmp (operation failed)
Failed: FileDelete C:\DOCUME~1\helene\LOCALS~1\Temp\~DFC44D.tmp (operation failed)
Script completed. -
Contributeur sécuritéRe,
1/ * Désinstalle Navilog :
o Soit par ajout/suppression des programmes,
o Soit par le menu Démarrer>Programmes>Navilog1>Désinstaller Navilog1
* Supprime le dossier C:\Program Files\Navilog1 s'il existe encore.
2/ Désinstalle Media-access via ajout/suppression des programmes.
3/
* Imprime ceci.
* Télécharge Brute Force Uninstaller (de Merijn) : http://www.merijn.org/files/bfu.zip
* Créé un nouveau dossier directement sur le C:\ et nomme-le BFU.
* Décompresse le fichier téléchargé dans ce nouveau dossier au moyen d'un clic droit (Extraire vers...C:\BFU).
* Ouvre le bloc-note de windows.
* Copie-colle ces lignes dans la fenêtre du bloc-note :
OptionUnloadShell
Processkill \MediaAccK.exe|1
RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Media Access
RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|qatdnzw
RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Norman ZANDA
RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|lzkusdbyzv
ServiceStop Norman ZANDA
ServiceDisable Norman ZANDA
ServiceDelete Norman ZANDA
ServiceStop Pptp55islnt
ServiceDisable Pptp55islnt
ServiceDelete Pptp55islnt
FolderDelete %PROGRAMFILES%\Media Access
FolderDelete %SYSTEMDRIVE%\Norman
SystemEmptyTempFolder
SystemEmptyInternetCache
SystemEmptyRecycleBin
* Enregistre le fichier sur le bureau en fix.txt
* Fais un clic droit sur ce fichier, choisis Renommer et dans la case, indique le nom fix.BFU.
* Déplace-le dans le même dossier que Brute Force Uninstaller soit dans c:\BFU
* Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : fix.bfu et BFU.exe (très important).
* Redémarre en mode Sans Échec : au redémarrage, tapote immédiatement la touche F8 (ou F5); tu verras un écran avec choix de démarrages apparaître. Utilisant les flèches du clavier, choisis "Mode Sans Échec" et valide avec "Entrée". Choisis ton compte usuel, et non Administrateur.
* Démarre le "Brute Force Uninstaller" en double-cliquant BFU.exe (du dossier C:\BFU).
* Configure BFU comme ceci :
http://img137.imageshack.us/img137/6070/bfusn5.jpg
* Clique sur le petit dossier jaune, à la droite de la boîte Scriptline to execute, et double-clique sur : fix.bfu.
* Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\fix.bfu
* Clique sur Execute et laisse-le faire son travail.
* Attendre que Complete script execution apparaîsse et clique sur OK.
* Clique sur save et enregistre le rapport sur le bureau : rapport.txt
* Clique Exit pour fermer le programme BFU.
* Redémarre normalement ton PC et édite le contenu de rapport.txt dans ta prochaine réponse.
4/ Ouvre Hijackthis>"Do a scan only" et coche ceci :
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http:///???*??Q???????*???7
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,setup32.exe
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
Clique sur fix/réparer.
5/ Télécharge Ccleaner Basic https://www.ccleaner.com/ccleaner/download
Ouvre Ccleaner, clique sur "lancer le nettoyage".
6/ Télécharge AVGantispyware : https://www.avg.com/en-ww/free-antivirus-download
Tu l'installes.
Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente.
Clique sur le bouton Analyse (de la barre d'outils)
Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine.
Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
A la fin du scan, choisis l'option " Appliquer toutes les actions " en bas. Ensuite.
Clique sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.
7/ * Fais un scan en ligne en cliquant ici : http://assiste.com.free.fr/...
* Choisis Kaspersky.
* Tu dois réaliser le scan en utilisant Internet explorer. Une information apparait en haut, près de la barre d'état. Tu dois accepter et installer l'activeX proposé. La mise à jour de l'antivirus se lance.
* Réalise un scan complet du système.
* Sauvegarde le rapport en mode texte à l'issue du scan.
8/ Edite ces rapports :
rapport.txt de BFU, AVGantispyware, Kaspersky et un nouveau rapport Hijackthis.
FillPCA
- 1
- 2