

julieh
Membres-
Compteur de contenus
12 -
Inscription
-
Dernière visite
julieh's Achievements

Junior Member (3/12)
0
Réputation sur la communauté
-
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Merci beaucoup à tous ! Je m'en vais plus légère donc ! Bises -
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Voilà c'est bon. J'ai fixé les dernières lignes que tu m'avais indiqué. Ca donne ça : Logfile of HijackThis v1.99.1 Scan saved at 00:35:19, on 12/10/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\LiveUpdate\LiveUpdate.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKCU\..\Run: [bTCLiveUpdate] "C:\Program Files\LiveUpdate\LiveUpdate.exe" /autostart O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe Est-ce que ça te convient mieux ? ps : est-ce que je rétablis teatimer ? -
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Ok. En fait ça fonctionnait pas avec ton truc : au redemarrage, j'avais encore le teatimer. J'ai fait autrement : - Spybot - démarrage système - décochage de la case teatimer Je redémarre pour voir si c'est bon et si oui, je fais l'hijackthis. -
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Zut alors ! Je croyais l'avoir désactivé en faisant un clic droit sur l'icone en bas à droite. Ca suffit pas ? Comment le désactiver correctement STP ? -
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Rhaaaaa ! J'avais pas vu ton edition concernant Teatimer ! Je recommence l'hijackthis (en attendant, si tu en a pas trop marre, jette un coup d'oeil sur mon rapport Antivir ci-dessus). Voilà l'hijack SANS TEA TIMER : Logfile of HijackThis v1.99.1 Scan saved at 23:36:44, on 11/10/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\AVPersonal\AVGUARD.EXE C:\Program Files\AVPersonal\AVWUPSRV.EXE C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\LiveUpdate\LiveUpdate.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [bTCLiveUpdate] "C:\Program Files\LiveUpdate\LiveUpdate.exe" /autostart O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O16 - DPF: ppctlcab - O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} - O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} - O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} - O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} - O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe -
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Merci beaucoup Jack. Je fixe ça tout de suite. J'ai refait un scan Antivir mais je comprends pas tout. Pourrais-tu me dire si quelquechose cloche ? Creation date of the report file: mardi 11 octobre 2005 18:47 AntiVir®/XP (2000 + NT) PersonalEdition Classic Build 1068 of 21.09.2005 Mainprogram 6.32.00.07 of 16.09.2005 VDF file 6.32.0.64 (0) of 06.10.2005 This program is for PERSONAL USE only. Any other use is PROHIBITED. Informations regarding commercial versions of AntiVir may be obtained from: www.hbedv.com. Scanning for 228713 virus strains and unwanted programs. Licensed for: AntiVir Personal Edition Serial number: 0000149991-WURGE-0001 Please enter the workstation and contact name with phone number in this form: Name ___________________________________________ Street ___________________________________________ Town ___________________________________________ Phone/Fax ___________________________________________ Email ___________________________________________ Platform: Windows NT Workstation Windows version: 5.1 Build 2600 (Service Pack 1) Username: Julie_boulot Computername: XP_Julie Processor: Pentium Working memory: 392196 KB free Version information: AVWIN.DLL : 6.32.00.04 561192 16.08.2005 10:22:36 AVEWIN32.DLL : 6.32.0.6 832000 20.09.2005 12:50:22 AVGNT.EXE : 6.32.00.00 168039 29.07.2005 10:19:28 AVGUARD.EXE : 6.32.00.06 207912 07.09.2005 16:34:50 GUARDMSG.DLL : 6.30.00.02 94248 01.02.2005 11:24:10 AVGCMSG.DLL : 6.32.00.00 258165 29.07.2005 10:19:30 AVGNTDW.SYS : 6.31.00.01 32896 29.04.2005 08:07:16 AVPACK32.DLL : 6.31.01.07 327720 07.09.2005 09:08:28 AVGETVER.DLL : 6.30.00.00 24576 28.01.2005 18:10:20 AVSHLEXT.DLL : 6.30.00.01 40960 28.01.2005 18:10:22 AVSched32.EXE : 6.32.00.01 110632 20.09.2005 14:16:24 AVSched32.DLL : 6.30.00.00 122880 01.02.2005 11:24:10 AVREG.DLL : 6.31.00.05 41000 07.09.2005 16:34:50 AVRep.DLL : 6.32.00.60 1404968 05.10.2005 16:17:28 INETUPD.EXE : 6.32.00.05 254011 16.08.2005 16:46:08 INETUPD.DLL : 6.32.00.05 143360 16.08.2005 16:46:08 CTL3D32.DLL : 2.31.000 27136 30.08.2002 09:00:00 MFC42.DLL : 6.00.8665.0 995383 30.08.2002 09:00:00 MSVCRT.DLL : 7.0.2600.1106 (xpsp1.020828-1920 MSVCRT.DLL : 7.0.2600.1106 323072 30.08.2002 09:00:00 CTL3DV2.DLL : No information Configuration file: Name of configuration file: C:\Program Files\AVPersonal\AVWIN.INI Name of report file: C:\Program Files\AVPersonal\LOGFILES\AVWIN.LOG Start path: C:\Program Files\AVPersonal Command line: Start mode: unknown Mode of report file: [ ] Do not create report [X] Overwrite report [ ] Append new report Data in report file: [X] Infected files [ ] Infected files with paths [ ] All scJulied files [ ] Full information Abridge report file: [ ] Abridge report file Warnings in report: [X] Access denied/file locked [X] Wrong file size in directory [X] Wrong creation time in directory [ ] COM file is too large [X] Invalid start address [X] Invalid EXE header [X] Possibly damaged Summary report: [X] Create summary report Output file: AVWIN.ACT Maximum number of entries: 100 Where to search: [X] Memory [X] Boot record of selected drives [ ] Report unknown boot sectors [X] All files [ ] Program files Response in case of a detection: [X] Repair with prompt [ ] Repair without prompt [ ] Delete with prompt [ ] Delete without prompt [ ] Write in report file only [X] Acoustic alarm Response in case of destroyed files: [X] Delete with prompt [ ] Delete without prompt [ ] Ignore Response in case of destroyed files: [X] No change [ ] Current system time [ ] Correct date Drag&drop settings: [X] Scan subdirectories Profile settings: [X] Scan subdirectories Archive options [X] Search archive [X] Archive types to leave out 1002 1001 1000 Miscellaneous options: Temporary path: %TEMP% -> C:\DOCUME~1\Julie_B~1\LOCALS~1\Temp [X] Overwrite infected files [ ] Detect idle time [X] Allow interruptions of scan [ ] Load AVWin®/NT Guard on System start General settings: [X] Save options on exiting AntiVir Priority: medium Drives: A: Floppy drive C: Hard disk D: CD-ROM E: CD-ROM F: Floppy drive Start of scan: mardi 11 octobre 2005 18:47 Memory test OK Master boot record of hard disk HD0 OK Master boot record of hard disk HD1 OK Boot record of drive C: OK C:\ pagefile.sys Access denied! Error during file opening! This is a Windows swap file. This file is locked by Windows. Error code: 0x000D WARNING! Access error/file locked! C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson user.dmp Access denied! Error during file opening! Error code: 0x000D WARNING! Access error/file locked! C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery AdobeImageReady.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobeImageReady1.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobeImageReady2.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobeImageReady3.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobePhotoshop.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobePhotoshop1.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobePhotoshop2.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobePhotoshop3.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobePhotoshop4.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobePhotoshop5.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobeSaveForWeb.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobeSaveForWeb1.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobeSaveForWeb2.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobeSaveForWeb3.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobeSaveForWeb4.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobeSaveForWeb5.zip ArchiveType: ZIP NOTE! The whole archive is password protected AdobeSaveForWeb6.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom1.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom10.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom11.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom12.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom13.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom14.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom15.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom16.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom17.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom18.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom19.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom2.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom20.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom21.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom22.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom23.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom24.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom25.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom26.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom27.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom28.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom29.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom3.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom30.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom31.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom32.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom33.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom4.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom5.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom6.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom7.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom8.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroBurningRom9.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroWaveEditor.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroWaveEditor1.zip ArchiveType: ZIP NOTE! The whole archive is password protected AheadNeroWaveEditor2.zip ArchiveType: ZIP NOTE! The whole archive is password protected AlexaRelated.zip ArchiveType: ZIP NOTE! The whole archive is password protected BlazeFindSearchEnhancerISTbar.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs1.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs10.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs2.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs3.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs4.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs5.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs6.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs7.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs8.zip ArchiveType: ZIP NOTE! The whole archive is password protected CommonDialogs9.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante1.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante10.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante11.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante12.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante13.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante14.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante15.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante16.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante17.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante18.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante19.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante2.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante20.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante21.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante22.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante23.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante24.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante25.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante3.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante4.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante5.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante6.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante7.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante8.zip ArchiveType: ZIP NOTE! The whole archive is password protected DLLpartagemanquante9.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit1.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit10.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit11.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit12.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit13.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit14.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit15.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit16.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit17.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit18.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit19.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit2.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit20.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit21.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit22.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit23.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit24.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit25.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit26.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit27.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit28.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit29.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit3.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit30.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit31.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit32.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit33.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit34.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit35.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit36.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit37.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit38.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit39.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit4.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit40.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit41.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit42.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit43.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit44.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit45.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit46.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit47.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit48.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit49.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit5.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit50.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit51.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit52.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit53.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit54.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit55.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit56.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit57.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit58.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit59.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit6.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit60.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit61.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit62.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit63.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit64.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit65.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit66.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit67.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit68.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit69.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit7.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit70.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit71.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit72.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit73.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit74.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit75.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit76.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit77.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit78.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit79.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit8.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit80.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit81.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit82.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit83.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit84.zip ArchiveType: ZIP NOTE! The whole archive is password protected DSOExploit9.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant1.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant10.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant11.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant2.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant3.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant4.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant5.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant6.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant7.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant8.zip ArchiveType: ZIP NOTE! The whole archive is password protected Fichierdaidemanquant9.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb1.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb10.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb11.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb2.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb3.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb4.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb5.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb6.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb7.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb8.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWeb9.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWebProducts.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWebProducts1.zip ArchiveType: ZIP NOTE! The whole archive is password protected FunWebProducts2.zip ArchiveType: ZIP NOTE! The whole archive is password protected GabestMediaPlayerClassic.zip ArchiveType: ZIP NOTE! The whole archive is password protected GabestMediaPlayerClassic1.zip ArchiveType: ZIP NOTE! The whole archive is password protected GabestMediaPlayerClassic2.zip ArchiveType: ZIP NOTE! The whole archive is password protected GoogleToolbar.zip ArchiveType: ZIP NOTE! The whole archive is password protected GoogleToolbar1.zip ArchiveType: ZIP NOTE! The whole archive is password protected GoogleToolbar2.zip ArchiveType: ZIP NOTE! The whole archive is password protected GoogleToolbar3.zip ArchiveType: ZIP NOTE! The whole archive is password protected GoogleToolbar4.zip ArchiveType: ZIP NOTE! The whole archive is password protected GoogleToolbar5.zip ArchiveType: ZIP NOTE! The whole archive is password protected GoogleToolbar6.zip ArchiveType: ZIP NOTE! The whole archive is password protected GoogleToolbar7.zip ArchiveType: ZIP NOTE! The whole archive is password protected GoogleToolbar8.zip ArchiveType: ZIP NOTE! The whole archive is password protected Informationdedsinstallationerrone.zip ArchiveType: ZIP NOTE! The whole archive is password protected Informationdedsinstallationerrone1.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer1.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer10.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer11.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer12.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer13.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer14.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer15.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer16.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer17.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer18.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer19.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer2.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer20.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer21.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer3.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer4.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer5.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer6.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer7.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer8.zip ArchiveType: ZIP NOTE! The whole archive is password protected InternetExplorer9.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone1.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone10.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone11.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone12.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone2.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone3.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone4.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone5.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone6.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone7.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone8.zip ArchiveType: ZIP NOTE! The whole archive is password protected Localisationerrone9.zip ArchiveType: ZIP NOTE! The whole archive is password protected MacromediaDreamweaverMX.zip ArchiveType: ZIP NOTE! The whole archive is password protected MacromediaDreamweaverMX1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MacromediaDreamweaverMX2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MacromediaDreamweaverMX3.zip ArchiveType: ZIP NOTE! The whole archive is password protected MacromediaFlashMX.zip ArchiveType: ZIP NOTE! The whole archive is password protected MacromediaFlashMX1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MacromediaFlashMX2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MacromediaFlashMX3.zip ArchiveType: ZIP NOTE! The whole archive is password protected MacromediaFlashMX4.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSClipArtGallery.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSClipArtGallery1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSClipArtGallery2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD10.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD11.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD12.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD13.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD14.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD3.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD4.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD5.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD6.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD7.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD8.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectD9.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectDraw.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectDraw1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectDraw2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectDraw3.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectDraw4.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectDraw5.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectDraw6.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectDraw7.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectDraw8.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSDirectDraw9.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSManagementConsole.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSManagementConsole1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSManagementConsole2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSManagementConsole3.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSManagementConsole4.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer10.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer11.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer12.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer13.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer14.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer15.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer16.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer17.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer18.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer19.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer20.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer21.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer22.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer23.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer24.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer25.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer26.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer27.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer28.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer3.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer4.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer5.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer6.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer7.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer8.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSMediaPlayer9.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice10.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice11.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice12.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice13.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice14.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice3.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice4.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice5.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice6.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice7.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice8.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOffice9.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeExcel.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeExcel1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint10.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint11.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint3.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint4.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint5.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint6.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint7.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint8.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePowerPoint9.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficePublisher.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord10.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord11.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord3.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord4.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord5.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord6.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord7.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord8.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSOfficeWord9.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSPaint.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSRegedit.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSRegedit1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSRegedit2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSSearchAssistant.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSSearchAssistant1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSSearchAssistant2.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSSearchAssistant3.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSSearchAssistant4.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSSearchAssistant5.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSSearchAssistant6.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSSearchAssistant7.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSWordpad.zip ArchiveType: ZIP NOTE! The whole archive is password protected MSWordpad1.zip ArchiveType: ZIP NOTE! The whole archive is password protected MyWayMyBar.zip ArchiveType: ZIP NOTE! The whole archive is password protected SYSWEBTELECOM.zip ArchiveType: ZIP NOTE! The whole archive is password protected SYSWEBTELECOM1.zip ArchiveType: ZIP NOTE! The whole archive is password protected SYSWEBTELECOM2.zip ArchiveType: ZIP NOTE! The whole archive is password protected SYSWEBTELECOM3.zip ArchiveType: ZIP NOTE! The whole archive is password protected SYSWEBTELECOM4.zip ArchiveType: ZIP NOTE! The whole archive is password protected SYSWEBTELECOM5.zip ArchiveType: ZIP NOTE! The whole archive is password protected SYSWEBTELECOM6.zip ArchiveType: ZIP NOTE! The whole archive is password protected SYSWEBTELECOM7.zip ArchiveType: ZIP NOTE! The whole archive is password protected SYSWEBTELECOM8.zip ArchiveType: ZIP NOTE! The whole archive is password protected SYSWEBTELECOM9.zip ArchiveType: ZIP NOTE! The whole archive is password protected VirtualDub.zip ArchiveType: ZIP NOTE! The whole archive is password protected Windows.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer1.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer10.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer11.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer12.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer13.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer14.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer15.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer16.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer17.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer18.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer19.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer2.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer20.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer21.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer22.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer23.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer24.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer25.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer26.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer27.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer28.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer29.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer3.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer30.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer31.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer32.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer33.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer34.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer35.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer36.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer37.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer38.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer39.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer4.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer40.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer41.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer42.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer43.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer44.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer45.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer46.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer47.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer48.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer49.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer5.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer50.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer51.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer52.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer53.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer54.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer55.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer56.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer57.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer58.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer59.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer6.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer60.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer61.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer62.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer63.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer64.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer65.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer66.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer67.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer68.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer69.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer7.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer70.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer71.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer72.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer73.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer74.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer75.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer76.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer77.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer8.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsExplorer9.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK1.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK10.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK11.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK12.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK13.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK14.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK15.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK16.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK17.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK18.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK19.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK2.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK20.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK21.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK22.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK23.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK24.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK25.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK26.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK27.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK28.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK29.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK3.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK30.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK31.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK32.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK33.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK34.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK35.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK36.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK37.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK4.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK5.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK6.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK7.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK8.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsMediaSDK9.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith1.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith10.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith11.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith12.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith13.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith14.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith15.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith16.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith17.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith18.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith19.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith2.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith20.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith21.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith22.zip ArchiveType: ZIP NOTE! The whole archive is password protected WindowsOpenWith23.zip ArchiveType: ZIP -
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Ok. Pour Spybot c'est fait : il a corrigé le problème Mais pour Antivir, il a pas pu corriger. Et puis j'ai relu la procédure : mon hijackthis n'a pas été fait en mode normal. Je l'ai fait en mode sans échec. Je recommence donc correctement (excusez-moi). ---------------------------------------------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 18:09:05, on 11/10/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\Program Files\ewido\security suite\ewidoguard.exe C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\HijackThis\HijackThis.exe C:\Program Files\LiveUpdate\LiveUpdate.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\WINDOWS\System32\wuauclt.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080 O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [bTCLiveUpdate] "C:\Program Files\LiveUpdate\LiveUpdate.exe" /autostart O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O16 - DPF: ppctlcab - O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} - O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} - O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} - O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe ------------------------------------------------------------------------------------------------ -
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Tu as raison, apparemment, ce sont des cookies. :mozilla.23:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Comclick : Ignoré :mozilla.25:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Atdmt : Ignoré :mozilla.28:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Doubleclick : Ignoré :mozilla.38:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Mediaplex : Ignoré :mozilla.40:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Adtech : Ignoré :mozilla.41:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Adtech : Ignoré :mozilla.44:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Advertising : Ignoré :mozilla.45:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Advertising : Ignoré :mozilla.46:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Bluestreak : Ignoré :mozilla.51:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Estat : Ignoré :mozilla.52:C:\Documents and Settings\Alex\Application Data\Mozilla\Firefox\Profiles\9qz45423.default\cookies.txt -> Spyware.Cookie.Valueclick : Ignoré :mozilla.9:C:\Documents and Settings\Alex\Application Data\Phoenix\Profiles\default\mtbmcgag.slt\cookies.txt -> Spyware.Cookie.Mediaplex : Ignoré :mozilla.7:C:\Documents and Settings\Alex\Application Data\Thunderbird\Profiles\default\7tjhrqb3.slt\cookies.txt -> Spyware.Cookie.Bluestreak : Ignoré :mozilla.11:C:\Documents and Settings\Alex\Application Data\Thunderbird\Profiles\default\7tjhrqb3.slt\cookies.txt -> Spyware.Cookie.Doubleclick : Ignoré C:\Documents and Settings\All Users\Documents\sauvegarde\My Archives\08_SAUVEGARDE_cle_atrier.zip/Tout fou le camps .exe -> Not-A-Virus.Joke.Melter : Ignoré :mozilla.11:C:\Documents and Settings\Julie\Application Data\Mozilla\Firefox\Profiles\kp4p15qw.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Ignoré :mozilla.12:C:\Documents and Settings\Julie\Application Data\Mozilla\Firefox\Profiles\kp4p15qw.default\cookies.txt -> Spyware.Cookie.Weborama : Ignoré :mozilla.46:C:\Documents and Settings\Julie\Application Data\Mozilla\Firefox\Profiles\kp4p15qw.default\cookies.txt -> Spyware.Cookie.Bluestreak : Ignoré :mozilla.47:C:\Documents and Settings\Julie\Application Data\Mozilla\Firefox\Profiles\kp4p15qw.default\cookies.txt -> Spyware.Cookie.247realmedia : Ignoré :mozilla.53:C:\Documents and Settings\Julie\Application Data\Mozilla\Firefox\Profiles\kp4p15qw.default\cookies.txt -> Spyware.Cookie.Valueclick : Ignoré :mozilla.54:C:\Documents and Settings\Julie\Application Data\Mozilla\Firefox\Profiles\kp4p15qw.default\cookies.txt -> Spyware.Cookie.Valueclick : Ignoré :mozilla.60:C:\Documents and Settings\Julie\Application Data\Mozilla\Firefox\Profiles\kp4p15qw.default\cookies.txt -> Spyware.Cookie.Estat : Ignoré :mozilla.62:C:\Documents and Settings\Julie\Application Data\Mozilla\Firefox\Profiles\kp4p15qw.default\cookies.txt -> Spyware.Cookie.Mediaplex : Ignoré :mozilla.63:C:\Documents and Settings\Julie\Application Data\Mozilla\Firefox\Profiles\kp4p15qw.default\cookies.txt -> Spyware.Cookie.Doubleclick : Ignoré :mozilla.7:C:\Documents and Settings\Julie_boulot\Application Data\Thunderbird\Profiles\default\7tjhrqb3.slt\cookies.txt -> Spyware.Cookie.Bluestreak : Ignoré :mozilla.11:C:\Documents and Settings\Julie_boulot\Application Data\Thunderbird\Profiles\default\7tjhrqb3.slt\cookies.txt -> Spyware.Cookie.Doubleclick : Ignoré C:\Documents and Settings\Julie_boulot\Cookies\Julie_boulot@247realmedia[2].txt -> Spyware.Cookie.247realmedia : Ignoré C:\Documents and Settings\Julie_boulot\Cookies\Julie_boulot@estat[1].txt -> Spyware.Cookie.Estat : Ignoré C:\Documents and Settings\Julie_boulot\Cookies\Julie_boulot@tradedoubler[2].txt -> Spyware.Cookie.Tradedoubler : Ignoré Donc, le PC va pas mal. Par contre, - j'ai refait un Spybot et il me dit que j'ai SmitFraud.C (copie ecran) - Antivir m'a signalé Phisp/SunBkfraud.G sans pouvoir l'effacer. Qu'est-ce qu'il faut en penser ? En attendant, j'essaie de voir si je peux récupérer ma connection ADsl en réinstallant mon cd Free. + -
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Voila, EWIDO est en train de tourner : il trouve des trucs dans Mozilla. Je lui ai dit de ne rien faire. Je vous posterai le rapport avant de faire quoi que ce soit. -
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Pour les bêtises, à priori, c'est nous Oui pardon : il s'agit bien d'Antivir et je l'ai désinstallé (c'était précisé dans la procédure). J'ai fixé les lignes : un message m'a alerter que mon "administrateur" voulait pas qu'on touche au registre (comprend pas très bien l'anglais mais bon...) mais apparement, tout à été fait correctement. Maintenant, je vais passer Ewido. Merci encore -
[résolu]Assistance hijackthis
julieh a répondu à un(e) sujet de julieh dans Analyses et éradication malwares
Merci beaucoup a vous pour votre aide ! D'abord, je dois vous préciser un truc (j'ai l'impression qu'on a fait des bêtises....) : 1) il y a quelques mois, mon frère m'a dit avoir changé le fichier Host pour empecher l'accès a des sites X. Il dit qye depuis cette manip, y'a des petits problèmes et aussi, il y a eu de nombreuses alerte de S&B (teatimer). 2) Lord de la procédure préalable, AVG m'a signalé certains fichiers infectés et, comme précisé dans les instructions, j'ai effacé ces fichiers : - Dial/301763 - Defaut.sfx - DR/Winshell.50 - Dial Generic Par contre, je n'ai pas pu effacer "Phisp/SunBkfraud.G" Bref, depuis cette manipulation, on ne peut plus se connecter à Internet (je suis sur mon vieux portable là). Ensuite : Pour Jack Burton : 1/ Ouf ! 2/ J'ai fait ce que tu m'as dit sauf pour "Macromedia Licensing Service" : l'option "arreter" n'était pas active, par contre, le type de démarrage était "manuel" et je mis "désactivé". 3/ Clis me dit que j'ai plusieurs antivirus : je dois enlever les autres avant d'utiliser Ewido ? Lesquels ? (normalement, j'ai Symantec Antivirus mais je ne sais quels autres) Pour Clis : Je ne sais pas comment "fixer". Fais une recherche sur cette manipulation et après, je "fixerai" Ok Dans Hijackthis, je vois un bouton "Fix checked" : est-ce que je dois sélectionner les lignes que tu m'as indiquée et cliquer sur ce bouton ? Merci à vous. -
Bonjour Spyboot a détecté un truc sur le pc de mon frangin (je vous dirai le nom demain parce que je m'en souviens plus dans l'immédiat) Du coup, nous avons suivi votre procédure et je vous joins le rapport hijack en espérant que vous pourrez nous aider à faire du nettoyage : Logfile of HijackThis v1.99.1 Scan saved at 03:39:19, on 11/10/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/fr/fra/gen/default.htm R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.free.fr/search/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.free.fr/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.euro.dell.com/countries/fr/fra/gen/default.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe O4 - HKLM\..\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [bTCLiveUpdate] "C:\Program Files\LiveUpdate\LiveUpdate.exe" /autostart O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Photo Express Calendar Checker SE.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\CalCheck.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll O12 - Plugin for .png: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll O12 - Plugin for .psd: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll O12 - Plugin for .wav: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll O14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/ O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} - O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1119735746640 O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.euro.dell.com/global/apps/s...er/PROFILER.CAB O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - http://us.dl1.yimg.com/download.companion....ebio5_1_6_0.cab O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccess.exe O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\System32\Tablet.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe Merci !