Archive CAB corrompue et decompression bomb

Bonjour,

J'ai un probleme avec Avast qui a repéré des fichiers cAB corrompus et des bombes de decompression.

J'ai vu su le forum que vous recommendiez d'utiliser hijackthis, ce que j'ai donc fait, mais j'ai du mal a comprendre le rapport.

Merci à une bonne âme charitable de bien vouloir m'eclairer a ce sujet.

merci d'avance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:36:43, on 22/09/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ASUS\ASUS DH Remote\AsRc.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\ASUS\ASUS DH Remote\AsDhRemote.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Ai Quicker Help] "C:\Program Files\ASUS\ASUS DH Remote\AsRc.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Device Detector 3.lnk = C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_16\bin\npjpi142_16.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_16\bin\npjpi142_16.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {4E218431-2F07-40BD-A9D3-035324C1F13F} (DyynoX Class) - http://webserver.dyyno.com/DyynoClient/DyynoCAB.CAB
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (Contrôleur de DownloadManager) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.2.1.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\Windows\system32\UAService7.exe

--
End of file - 6300 bytes
Configuration: Windows Vista
Internet Explorer 7.0

9 réponses

  1. Non je n'ai pas encore touché aux fichiers repérés par Avast.

    Bit Defender n'a rien trouvé,

    BitDefender Online Scanner - Rapport virus en temps réel

    Généré à: Mon, Sep 22, 2008 - 12:26:43

    --------------------------------------------------------------------------------

    Info d'analyse

    Fichiers scannés
    128306

    Infectés Fichiers
    0

    Virus Détectés

    Aucun virus trouvé.

    je vais refaire un scan avec Kaspersky
    1. Contributeur sécurité
      quels fichiers sont inféctés selon avast?
      1. Les fichiers infectés selon avast, essentiellement du temporary internet files, mais j'arrive pas a faire de copier coller sur le rapport. Est ce que je dois les déplacer ou les mettre en quarantaine ?

        Sinon l'analyse de panda:

        ;***********************************************************************************************************************************************************************************
        ANALYSIS: 2008-09-22 13:50:18
        PROTECTIONS: 1
        MALWARE: 48
        SUSPECTS: 0
        ;***********************************************************************************************************************************************************************************
        PROTECTIONS
        Description Version Active Updated
        ;===================================================================================================================================================================================
        Windows Defender 1.1.3903.0 No No
        ;===================================================================================================================================================================================
        MALWARE
        Id Description Type Active Severity Disinfectable Disinfected Location
        ;===================================================================================================================================================================================
        00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@casalemedia[2].txt
        00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@doubleclick[1].txt
        00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@doubleclick[1].txt
        00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@atdmt[2].txt
        00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@atdmt[2].txt
        00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@tradedoubler[2].txt
        00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@tradedoubler[1].txt
        00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@247realmedia[2].txt
        00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@fastclick[1].txt
        00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@fastclick[2].txt
        00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@tribalfusion[2].txt
        00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@mediaplex[2].txt
        00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@mediaplex[1].txt
        00145869 Cookie/SpyLog TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@spylog[2].txt
        00147824 Cookie/Clickbank TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@clickbank[1].txt
        00159564 Cookie/WUpd TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@revenue[2].txt
        00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@com[1].txt
        00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@com[1].txt
        00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@xiti[1].txt
        00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@xiti[1].txt
        00167709 Cookie/fe.lea.lycos TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@fe.lea.lycos[1].txt
        00167724 Cookie/HotLog TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@hotlog[1].txt
        00167747 Cookie/Azjmp TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@azjmp[1].txt
        00167749 Cookie/Toplist TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@toplist[1].txt
        00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@statcounter[1].txt
        00167760 Cookie/Hitslink TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@counter.hitslink[1].txt
        00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@ad.yieldmanager[1].txt
        00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@apmebf[1].txt
        00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@serving-sys[2].txt
        00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@serving-sys[1].txt
        00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@bs.serving-sys[2].txt
        00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@bs.serving-sys[1].txt
        00168095 Cookie/888 TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@888[2].txt
        00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@weborama[1].txt
        00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@weborama[1].txt
        00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@adtech[1].txt
        00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@adtech[2].txt
        00168110 Cookie/Server.iad.Liveperson TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@server.iad.liveperson[1].txt
        00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@fl01.ct2.comclick[2].txt
        00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@fl01.ct2.comclick[2].txt
        00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@advertising[2].txt
        00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@advertising[1].txt
        00169287 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@media.adrevolver[3].txt
        00169287 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@media.adrevolver[1].txt
        00170304 Cookie/WebtrendsLive TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@statse.webtrendslive[2].txt
        00170304 Cookie/WebtrendsLive TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@statse.webtrendslive[2].txt
        00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@ads.pointroll[2].txt
        00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@overture[1].txt
        00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@overture[1].txt
        00170556 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@realmedia[2].txt
        00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@questionmarket[1].txt
        00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@questionmarket[2].txt
        00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@zedo[1].txt
        00172449 Cookie/MetriWeb TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@metriweb[2].txt
        00172483 Cookie/888 TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@int.sitestat[1].txt
        00172484 Cookie/Cassava TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@int.sitestat[2].txt
        00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@bluestreak[2].txt
        00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@adrevolver[2].txt
        00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@adrevolver[2].txt
        00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@adultfriendfinder[1].txt
        00194327 Cookie/Go TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@go[1].txt
        00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@searchportal.information[2].txt
        00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@adviva[2].txt
        00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@smartadserver[1].txt
        00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@smartadserver[2].txt
        00286734 Cookie/Adserver TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\Low\akhris_sento@adserver.filefront[1].txt
        01196325 Cookie/Enhance TrackingCookie No 0 Yes No C:\Users\Akhris Sento\AppData\Roaming\Microsoft\Windows\Cookies\akhris_sento@enhance[2].txt
        ;===================================================================================================================================================================================
        SUSPECTS
        Sent Location �6���s5
        ;===================================================================================================================================================================================
        ;===================================================================================================================================================================================
        VULNERABILITIES
        Id Severity Description �6���s5
        ;===================================================================================================================================================================================
        ;===================================================================================================================================================================================
        1. Contributeur sécurité
          utilise pour supprimer tes traces

          CCLEANER: (lance un nettoyage et répare 3 fois le registre) sans installer la barre yahoo
          (dans les options désactive la case: effacer les fichiers de plus de 48 heures)

          https://www.malekal.com/tutoriel-ccleaner/

          https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

          _______________________

          scan avec
          MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

          https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

          __________________________

          verifie avec avast si encore des infections
          1. Merci a toi.

            Je devine que pour toi c'est evident et je te remercie de prendre le temps de repeter 1000 fois la même chose a des gens comme moi :)

            Bonne continuation
            1. Contributeur sécurité
              au fait dans panda aucune infection trouvée , que des cookies que l'on a dès que l'on va sur le net ...
              ccleaner va les vier