[Problem] hijack et smitfraud

Salut

pour commancer, smitfraud révèle la presence d'un mechant rootkit !

Télécharge ce fichier (par ejvindh)
http://www.uploads.ejvindh.net/rustbfix.exe
...et sauvegarde-le sur ton Bureau.

Double clique rustbfix.exe afin de lancer l'outil.
Si une infection Rustock.b est détectée, une invite t'indiquera qu'il est nécessaire de redémarrer l'ordi. Ce redémarrage pourrait être plus long que d'habitude, et il est possible que deux redémarrages soient requis. Tout cela se fera automatiquement.
Suite au(x) redémarrage(s), deux rapports s'ouvriront : (%root%\avenger.txt & %root%\rustbfix\pelog.txt).
Poste (Copie/Colle) le contenu de ces deux rapports, ainsi qu'un nouveau rapport de smitfraud option 1 dans ta prochaine réponse.

@+

Tout d'abord merci de ton aide , voila les rapports demandé !

(etrangement au demmarage j'ai eu un erreur window me disant "pas de disque a l'interieur du lecteur" je sais pas si cela est important mais je precise quand meme ^^)

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\wdnyiwbg

*******************

Script file located at: \??\C:\vajrfvqw.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Driver PE386 unloaded successfully.
Program C:\Rustbfix\2run.bat successfully set up to run once on reboot.

Completed script processing.

*******************

Finished! Terminate.

************************* Rustock.b-fix -- By ejvindh *************************
08/01/2007 22:30:50,00

******************* Pre-run Status of system *******************

Rootkit driver PE386 is found. Starting the unload-procedure....

Rustock.b-ADS attached to the System32-folder:
:lzx32.sys 69550
Total size: 69550 bytes.
Attempting to remove ADS...
system32: deleted 69550 bytes in 1 streams.

Looking for Rustock.b-files in the System32-folder:
system32\lzx32.sys FOUND!
attempting to delete lzx32.sys from system32-folder

******************* Post-run Status of system *******************

Rustock.b-driver on the system: NONE!

Rustock.b-ADS attached to the System32-folder:
No System32-ADS found.

Looking for Rustock.b-files in the System32-folder:
No Rustock.b-files found in system32

******************************* End of Logfile ********************************

SmitFraudFix v2.132

Rapport fait à 22:48:53,56, 08/01/2007
Executé à partir de C:\Documents and Settings\Lych\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Lych

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Lych\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Lych\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

re

ok, fais le 1/ et 2/ de ce lien stp :

virus methode preliminaire de desinfection version fr

++

Petite question au passage , j'ai avg (antivirus et anti spy) et zone alarme , ai-je encore besoin d'avoir spybot et avast ??

J'imagine que ca doit faire un peu trop tout ces anti virus , surtout que malgré tout ca je suis envahi ^^

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 23:37:05 08/01/2007

+ Résultat de l'analyse:

C:\Documents and Settings\Lych\Cookies\lych@247realmedia[2].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
C:\Documents and Settings\Lych\Cookies\lych@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.

Fin du rapport

BitDefender Online Scanner

Scan report generated at: Tue, Jan 09, 2007 - 00:09:08

Scan path: C:\;D:\;E:\;F:\;G:\;

Statistics

Time

00:55:50

Files

580698

Folders

3870

Boot Sectors

4

Archives

4723

Packed Files

57326

Results

Identified Viruses

2

Infected Files

3

Suspect Files

1

Warnings

0

Disinfected

0

Deleted Files

3

Engines Info

Virus Definitions

368693

Engine build

AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)

Scan plugins

14

Archive plugins

38

Unpack plugins

6

E-mail plugins

6

System plugins

1

Scan Settings

First Action

Disinfect

Second Action

Delete

Heuristics

Yes

Enable Warnings

Yes

Scanned Extensions

*;

Exclude Extensions

Scan Emails

Yes

Scan Archives

Yes

Scan Packed

Yes

Scan Files

Yes

Scan Boot

Yes

Scanned File

Status

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\85ENSP2Z\uohhhtddnb[1].txt

Infected with: BehavesLike:Win32.ExplorerHijack

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\85ENSP2Z\uohhhtddnb[1].txt

Disinfection failed

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\85ENSP2Z\uohhhtddnb[1].txt

Deleted

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SXQBO5I7\loadad[1].exe

Suspected of: BehavesLike:Trojan.Downloader

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SXQBO5I7\loadad[1].exe

Disinfection failed

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SXQBO5I7\loadad[1].exe

Deleted

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SXQBO5I7\uohhhtddnb[1].txt

Infected with: BehavesLike:Win32.ExplorerHijack

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SXQBO5I7\uohhhtddnb[1].txt

Disinfection failed

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SXQBO5I7\uohhhtddnb[1].txt

Deleted

C:\WINDOWS\wpablan.exe

Infected with: BehavesLike:Trojan.FWDisable

C:\WINDOWS\wpablan.exe

Infected with: BehavesLike:Trojan.FWDisable

C:\WINDOWS\wpablan.exe

Disinfection failed

C:\WINDOWS\wpablan.exe

Delete failed

re

attention ! il faut absolument avoir qu'un seul antivirus et un seul parfeu ! sous peine d'avoir des conflits, forts ralentissement ...

poste un nouveau hijackthis stp

++

Merci de me repondre aussi rapidement.
Oki alors je garde quoi ? avg (virus et spy) spybot et zone alarm ?? c'est un bon choix ??

Logfile of HijackThis v1.99.1
Scan saved at 00:19:09, on 09/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\wpablan.exe
C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Lych\LOCALS~1\Temp\Rar$EX00.922\HijackThis.exe
C:\WINDOWS\system32\rundll32.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Install Driver Manager (Install Driver Table Manager) - Unknown owner - C:\WINDOWS\wpablan.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Salut

ok, c'est bon !

télécharge et execute ceci,

CleanUp40 (qui élimine les fichiers temporaires + cookies : gratuit )
http://pageperso.aol.fr/Balltrap34/CleanUp40.exe

tuto : (merci à Balltrap) http://pageperso.aol.fr/balltrap34/democleanup.htm

# Ccleaner : Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs .

*Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle
est cochée) puis clique sur "lancer le nettoyage"

ccleaner

tuto: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

precise tes soucis s'il en reste

@+

tu pense que le WPablan est partit?

j'ai reussi a install mon pilote son , merci beaucoup z'etes vraiment des types geniaux !

Salut

moi, c'est pas il, c'est elle ;-))

tu pense que le WPablan est partit?

???

contente pour toi !

voir aussi ici :

https://sebsauvage.net/safehex.html

securite proteger un ordinateur contre les malwares d internet

@+

Ouaip je crois que c'est bit defender qui l'as tué , merci bcp pour les deux liens.

Il reste quelques ralentissement sur le pc , avast est'il moins lourd et aussi efficace que avg ?

je te remet le hijack

Logfile of HijackThis v1.99.1
Scan saved at 23:00:35, on 09/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\wpablan.exe
C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Lych\LOCALS~1\Temp\Rar$EX00.031\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/default.aspx
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Install Driver Manager (Install Driver Table Manager) - Unknown owner - C:\WINDOWS\wpablan.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Et le smit !

SmitFraudFix v2.132

Rapport fait à 23:02:12,35, 09/01/2007
Executé à partir de C:\Documents and Settings\Lych\Bureau\programme\special virus\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Lych

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Lych\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»»

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

Configuration: Windows XP
Firefox 2.0

Merci de rester sur le même poste ;-)

tes logs sont propres !

pour les ralentissements : voir ici windows xp mon pc rame que faire

je pense que avast est plus efficace que avg antivirus, mais ce n'est que mon opinion, de plus, avast existe en français ...

parcontre avg antispyware est une merveille !!! ( à mon sene ! )

@+

;-))

Bonjour,

J'ai exactement le même problème que cette personne, mais avec une nVidia 7600 GS.
Suis-je donc également contaminé ?

Salut

pas nécessairement !

Télécharge ceci sur ton bureau :

Lien : hijackthis

Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm

Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.

++

Je vous remercie beaucoup de m'aider ! Ca me fait très plaisir ! :)

Voici le rapport généré (hijackthis.log) :

Logfile of HijackThis v1.99.1
Scan saved at 21:37:17, on 04/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP_1\VBPTASK.EXE
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\Documents and Settings\alexis\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.tiscali.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.unika.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Zango Search Assistant Helper /fleok=1D8A83A5C3E11362D8FC2B7201BF39A2EEC828789AE2DA785D7541 - {56F1D444-11BF-4879-A12B-79CF0177F038} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
O4 - HKLM\..\Run: [RestoreIT!] "C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP_1\VBPTASK.EXE" VBStart
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.unika.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://212.157.152.82/AxisCamControl.ocx
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

effectivement, des petites saltés, mais je ne sais pas si c'est lié ...

fais les manips de ce lien stp :

virus methode preliminaire de desinfection version fr

++

Oki merci.

Donc je fais tout ça et je posterai les 3 rapports demain (car tout cela risque de me prendre pas mal de temps).

Merci et à demain !

Avec AVG j'ai cliqué sur Appliquer toutes les modifications, mais j'ai supprimé que un truc. Comment je peux revenir en arrière ?

Salut Green Day !

T'as vu j'ai changé de grade !
Plus sérieusement voici mon rapport AVG... euh en fait j'en ai deux car comme tu as dû comprendre je n'ai supprimé qu'un problème après la première analyse, donc j'en ai refait une ! :)

Maintenant j'attaque BitDefender.

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 00:45:31 05/03/2007

+ Résultat de l'analyse:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56F1D444-11BF-4879-A12B-79CF0177F038} -> Adware.180Solutions : Ignoré.
HKU\S-1-5-21-2943091060-3783747636-3526023808-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{56F1D444-11BF-4879-A12B-79CF0177F038} -> Adware.180Solutions : Ignoré.
:mozilla.135:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.136:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.136:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.136:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.136:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.136:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.136:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.247realmedia : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@247realmedia[2].txt -> TrackingCookie.247realmedia : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@247realmedia[1].txt -> TrackingCookie.247realmedia : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@247realmedia[2].txt -> TrackingCookie.247realmedia : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@redcats.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@agora.122.2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@adbrite[2].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@ad.adocean[2].txt -> TrackingCookie.Adocean : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@servedby.advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@advertising[2].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@bluestreak[2].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@iv2.bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@burstnet[2].txt -> TrackingCookie.Burstnet : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@www.burstnet[1].txt -> TrackingCookie.Burstnet : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@promo.casinotropez[1].txt -> TrackingCookie.Casinotropez : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@casinotropez[1].txt -> TrackingCookie.Casinotropez : Ignoré.
:mozilla.142:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Com : Ignoré.
:mozilla.143:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Com : Ignoré.
:mozilla.143:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Com : Ignoré.
:mozilla.143:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Com : Ignoré.
:mozilla.143:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Com : Ignoré.
:mozilla.143:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Com : Ignoré.
:mozilla.143:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Com : Ignoré.
:mozilla.178:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.179:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.179:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.179:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.179:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.179:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.179:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.179:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.180:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.180:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.180:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.180:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.180:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.180:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.180:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.181:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.181:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.181:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.181:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.181:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.181:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Comclick : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@dealtime[1].txt -> TrackingCookie.Dealtime : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Ignoré.
:mozilla.28:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd84.txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@doubleclick[2].txt -> TrackingCookie.Doubleclick : Ignoré.
:mozilla.21:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Estat : Ignoré.
:mozilla.21:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Estat : Ignoré.
:mozilla.21:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Estat : Ignoré.
:mozilla.21:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Estat : Ignoré.
:mozilla.23:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Estat : Ignoré.
:mozilla.23:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Estat : Ignoré.
:mozilla.30:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Estat : Ignoré.
:mozilla.67:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd84.txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@as-us.falkag[2].txt -> TrackingCookie.Falkag : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@as1.falkag[1].txt -> TrackingCookie.Falkag : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@as-us.falkag[1].txt -> TrackingCookie.Falkag : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@as1.falkag[2].txt -> TrackingCookie.Falkag : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@fastclick[1].txt -> TrackingCookie.Fastclick : Ignoré.
:mozilla.188:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.189:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.189:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.189:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.189:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.189:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.189:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Googleadservices : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@ehg-ubisoft.hitbox[2].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@hitbox[2].txt -> TrackingCookie.Hitbox : Ignoré.
:mozilla.88:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd84.txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@overture[2].txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@qksrv[2].txt -> TrackingCookie.Qksrv : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@questionmarket[1].txt -> TrackingCookie.Questionmarket : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@real[1].txt -> TrackingCookie.Real : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@realmedia[1].txt -> TrackingCookie.Realmedia : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@revenue[1].txt -> TrackingCookie.Revenue : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@edge.ru4[2].txt -> TrackingCookie.Ru4 : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@statcounter[2].txt -> TrackingCookie.Statcounter : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@trafic[1].txt -> TrackingCookie.Trafic : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@valueclick[2].txt -> TrackingCookie.Valueclick : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@valueclick[2].txt -> TrackingCookie.Valueclick : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@valueclick[2].txt -> TrackingCookie.Valueclick : Ignoré.
C:\Documents and Settings\cyrille\Cookies\cyrille@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\maman\Cookies\maman@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\valérie\Cookies\valérie@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Ignoré.

Fin du rapport

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 12:04:13 05/03/2007

+ Résultat de l'analyse:

:mozilla.135:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.136:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.136:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.136:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.136:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.136:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.136:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@redcats.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@agora.122.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@ad.adocean[2].txt -> TrackingCookie.Adocean : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@servedby.advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@iv2.bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@burstnet[2].txt -> TrackingCookie.Burstnet : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@www.burstnet[1].txt -> TrackingCookie.Burstnet : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@promo.casinotropez[1].txt -> TrackingCookie.Casinotropez : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@casinotropez[1].txt -> TrackingCookie.Casinotropez : Nettoyé.
:mozilla.142:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.143:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.143:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.143:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.143:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.143:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.143:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.178:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.179:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.179:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.179:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.179:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.179:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.179:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.179:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.180:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.180:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.180:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.180:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.180:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.180:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.180:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.181:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.181:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.181:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.181:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.181:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.181:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@dealtime[1].txt -> TrackingCookie.Dealtime : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Nettoyé.
:mozilla.28:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd84.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.21:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.21:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.21:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.21:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.23:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.23:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.30:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.67:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd84.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@as-us.falkag[2].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@as-us.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@as1.falkag[2].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.188:D:\Mozilla Firefox\Profiles Sessions\Cyrille\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.189:C:\Documents and Settings\All Users\Documents\Profils\Cyrille\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.189:C:\Documents and Settings\All Users\Documents\Profils\Maman\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.189:C:\Documents and Settings\All Users\Documents\Profils\Valérie\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.189:D:\Mozilla Firefox\Profiles Sessions\Maman\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.189:D:\Mozilla Firefox\Profiles Sessions\Valérie\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.189:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd113.txt -> TrackingCookie.Googleadservices : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@ehg-ubisoft.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.88:D:\RECYCLER\S-1-5-21-2943091060-3783747636-3526023808-1011\Dd84.txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@overture[2].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@qksrv[2].txt -> TrackingCookie.Qksrv : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@real[1].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@realmedia[1].txt -> TrackingCookie.Realmedia : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@revenue[1].txt -> TrackingCookie.Revenue : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@edge.ru4[2].txt -> TrackingCookie.Ru4 : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@trafic[1].txt -> TrackingCookie.Trafic : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@valueclick[2].txt -> TrackingCookie.Valueclick : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@valueclick[2].txt -> TrackingCookie.Valueclick : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@valueclick[2].txt -> TrackingCookie.Valueclick : Nettoyé.
C:\Documents and Settings\cyrille\Cookies\cyrille@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\maman\Cookies\maman@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\valérie\Cookies\valérie@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyé.

Fin du rapport

Je me suis permis une petite dérive en utilisant Antivir (Bitdefender calculait 8h de scan !!!).

Voici son rapport (0 virus trouvé) :

AntiVir PersonalEdition Classic
Report file date: lundi 5 mars 2007 17:14

Scanning for 691045 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: alexis
Computer name: SALON

Version information:
BUILD.DAT : 217 12749 Bytes 05/12/2006 17:00:00
AVSCAN.EXE : 7.0.3.5 208936 Bytes 19/01/2007 15:05:47
AVSCAN.DLL : 7.0.3.1 35880 Bytes 12/12/2006 18:34:19
LUKE.DLL : 7.0.3.2 143400 Bytes 12/12/2006 18:34:21
LUKERES.DLL : 7.0.2.0 9256 Bytes 12/12/2006 18:34:21
ANTIVIR0.VDF : 6.35.0.1 7371264 Bytes 31/05/2006 19:21:26
ANTIVIR1.VDF : 6.37.1.151 4303360 Bytes 23/02/2007 18:29:38
ANTIVIR2.VDF : 6.37.1.182 86528 Bytes 01/03/2007 18:29:38
ANTIVIR3.VDF : 6.37.1.199 46080 Bytes 05/03/2007 16:13:42
AVEWIN32.DLL : 7.3.1.38 2322944 Bytes 21/02/2007 18:03:10
AVPREF.DLL : 7.0.2.0 23592 Bytes 12/12/2006 18:34:19
AVREP.DLL : 6.37.1.100 1142824 Bytes 17/02/2007 06:23:50
AVRPBASE.DLL : 7.0.0.0 2162728 Bytes 07/05/2006 18:22:00
AVPACK32.DLL : 7.2.0.5 368680 Bytes 29/10/2006 05:20:54
AVREG.DLL : 7.0.1.2 30760 Bytes 19/01/2007 15:05:47
NETNT.DLL : 6.32.0.0 6696 Bytes 27/09/2005 07:56:50
RCIMAGE.DLL : 7.0.1.3 2097192 Bytes 12/12/2006 18:34:13
RCTEXT.DLL : 7.0.12.1 77864 Bytes 12/12/2006 18:34:13

Configuration settings for the scan:
Jobname..........................: Local Drives
Configuration file...............: C:\Program Files\AntiVir PersonalEdition Classic\alldrives.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: G:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Skipped archive types............: Netscape/Mozilla Mailbox,
Macro heuristic..................: on
File heuristic...................: off
Different risk categories........: +GAME,+JOKE,+PCK,+SPR,
Expanded search settings.........: 0x00007000

Start of the scan: lundi 5 mars 2007 17:14

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Modules have been scanned
Scan process 'avcenter.exe' - '1' Modules have been scanned
Scan process 'avgnt.exe' - '1' Modules have been scanned
Scan process 'KHALMNPR.EXE' - '1' Modules have been scanned
Scan process 'SetPoint.exe' - '1' Modules have been scanned
Scan process 'LogitechDesktopMessenger.exe' - '1' Modules have been scanned
Scan process 'ctfmon.exe' - '1' Modules have been scanned
Scan process 'rundll32.exe' - '1' Modules have been scanned
Scan process 'avgas.exe' - '1' Modules have been scanned
Scan process 'avgnt.exe' - '1' Modules have been scanned
Scan process 'explorer.exe' - '1' Modules have been scanned
Scan process 'winlogon.exe' - '1' Modules have been scanned
Scan process 'csrss.exe' - '1' Modules have been scanned
Scan process 'alg.exe' - '1' Modules have been scanned
Scan process 'KHALMNPR.EXE' - '1' Modules have been scanned
Scan process 'SetPoint.exe' - '1' Modules have been scanned
Scan process 'LogitechDesktopMessenger.exe' - '1' Modules have been scanned
Scan process 'ctfmon.exe' - '1' Modules have been scanned
Scan process 'rundll32.exe' - '1' Modules have been scanned
Scan process 'avgas.exe' - '1' Modules have been scanned
Scan process 'vbptask.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'nvsvc32.exe' - '1' Modules have been scanned
Scan process 'mdm.exe' - '1' Modules have been scanned
Scan process 'LSSrvc.exe' - '1' Modules have been scanned
Scan process 'guard.exe' - '0' Modules have been scanned
Scan process 'avguard.exe' - '1' Modules have been scanned
Scan process 'sched.exe' - '1' Modules have been scanned
Scan process 'explorer.exe' - '1' Modules have been scanned
Scan process 'spoolsv.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'lsass.exe' - '1' Modules have been scanned
Scan process 'services.exe' - '1' Modules have been scanned
Scan process 'winlogon.exe' - '1' Modules have been scanned
Scan process 'csrss.exe' - '1' Modules have been scanned
Scan process 'smss.exe' - '1' Modules have been scanned
39 processes with 39 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!

Starting to scan the registry.
The registry was scanned ( 18 files ).

Starting the file scan:

Begin scan in 'C:\'
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\dtscsi.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd3197.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\' <Disque local 2>
Begin scan in 'E:\'
The path E:\ could not be found!
Le périphérique n'est pas prêt.

Begin scan in 'F:\'
The path F:\ could not be found!
Le périphérique n'est pas prêt.

Begin scan in 'G:\' <SuperBikes>

End of the scan: lundi 5 mars 2007 19:21
Used time: 2:07:12 min

The scan has been done completely.

30742 Scanning directories
750886 Files were scanned
0 viruses and/or unwanted programs were found
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
5 Files cannot be scanned
750886 Files not concerned
11557 Archives were scanned
5 Warnings
0 Notes

Puis le nouveau rapport hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 20:04:53, on 05/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP_1\VBPTASK.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Documents and Settings\alexis\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.tiscali.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.connect-we.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
O4 - HKLM\..\Run: [RestoreIT!] "C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP_1\VBPTASK.EXE" VBStart
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.connect-we.fr/
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://212.157.152.82/AxisCamControl.ocx
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Je vous remercie beaucoup de m'aider !

A bientôt