Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Demende analyse de log pour un gars debutant dans la chose

Spartan

Par Spartan
dans Analyses et éradication malwares

 Partager

Messages recommandés

Spartan Member

Spartan

Posté(e)
  • Auteur
Posté(e)

voila le log hijathis, mais ewido ne fonctionne toujours pas en sans echec ...

 

Log Hijathis :

 

Logfile of HijackThis v1.99.1

Scan saved at 20:13:41, on 07/25/2006

Platform: Windows 2000 SP4 (WinNT 5.00.2195)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

 

Running processes:

C:\WINNT\System32\smss.exe

C:\WINNT\system32\winlogon.exe

C:\WINNT\system32\services.exe

C:\WINNT\system32\lsass.exe

C:\WINNT\system32\svchost.exe

C:\WINNT\system32\LEXBCES.EXE

C:\WINNT\system32\spoolsv.exe

C:\WINNT\system32\LEXPPS.EXE

C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE

C:\WINNT\System32\svchost.exe

C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe

C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE

C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe

C:\Program Files\Pack Securite\Common\FSMA32.EXE

C:\Program Files\Pack Securite\Common\FSMB32.EXE

C:\WINNT\system32\regsvc.exe

C:\WINNT\system32\MSTask.exe

C:\WINNT\system32\stisvc.exe

C:\Program Files\Pack Securite\Common\FCH32.EXE

C:\WINNT\System32\WBEM\WinMgmt.exe

C:\WINNT\system32\svchost.exe

C:\Program Files\Pack Securite\Common\FAMEH32.EXE

C:\Program Files\Pack Securite\Anti-Virus\fsrw.exe

C:\Program Files\Pack Securite\FSPC\fspc.exe

C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe

C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe

C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe

C:\WINNT\Explorer.EXE

C:\WINNT\system32\wuauclt.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe

C:\Program Files\Trust\350SX CRADLE MOUSE WIRELESS OPTICAL\lwbwheel.exe

C:\Program Files\MessengerPlus! 3\MsgPlus.exe

C:\Program Files\PROMT5\INTEGRAL\pinmenu.exe

C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe

C:\Program Files\Lexmark 2200 Series\lxbvbmon.exe

C:\Program Files\Pack Securite\Common\FSM32.EXE

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\WINNT\system32\LVCOMSX.EXE

C:\Program Files\Logitech\Video\LogiTray.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe

C:\Program Files\Logitech\Video\FxSvr2.exe

C:\Hijackthis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://jakams.skyblog.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par AOL

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon

O4 - HKLM\..\Run: [hpfsched] C:\WINNT\hpfsched.exe

O4 - HKLM\..\Run: [PROMT Integrator] "C:\Program Files\PROMT5\INTEGRAL\PinStart.exe" /autorun

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe

O4 - HKLM\..\Run: [ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe

O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Trust\350SX CRADLE MOUSE WIRELESS OPTICAL\lwbwheel.exe

O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"

O4 - HKLM\..\Run: [Lexmark 2200 Series] "C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe"

O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s

O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash

O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW

O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Pack Securite\FSGUI\FSSW.EXE" /reboot

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXE

O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe

O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

O4 - HKLM\..\Run: [update] C:\Program Files\AntiVir PersonalEdition Classic\preupd.exe /CALLSCHEDULER /DM="0" /CALLSCHEDULER

O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Kit ADSL\Wizard\Agent_WiFi.exe

O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealPlayer\realplay.exe" /RunUPGToolCommandReBoot

O4 - Startup: PowerReg Scheduler.exe

O4 - Global Startup: Pack Securite.lnk = C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe

O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\Pack Securite\Anti-Spyware\blockpopups.htm

O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML

O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html

O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html

O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html

O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll

O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll

O9 - Extra 'Tools' menuitem: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll

O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll

O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll

O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm

O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm

O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm

O9 - Extra 'Tools' menuitem: Personnaliser les options de traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll

O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure...teleir_cert.cab

O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab

O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.fr.aol.com/molbin/share...84/mcinsctl.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.fr.aol.com/molbin/share...,21/mcgdmgr.cab

O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab

O23 - Service: Pack Securite (BackWeb Plug-in - 361343) - BackWeb Technologies Inc. - C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE

O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe

O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe

O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe

O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe

O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - Unknown owner - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe (file missing)

O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe

O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

 

 

En passant je me suis posé une question, Est t-il possible de modifier cette ligne " R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par AOL " Par "R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer " ? même si j'utilise Mozilla Firefox j'aimerai bien modifier ça ^^

bruce lee Devil Member !

bruce lee

Posté(e)
Posté(e)

re,

 

antivir est encore present:

 

O4 - HKLM\..\Run: [update] C:\Program Files\AntiVir PersonalEdition Classic\preupd.exe /CALLSCHEDULER /DM="0" /CALLSCHEDULER

 

désinstalle le ( demarrer/panneau de configuration/ ajouts suppressions de programme)

 

En passant je me suis posé une question, Est t-il possible de modifier cette ligne " R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par AOL " Par "R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer " ? même si j'utilise Mozilla Firefox j'aimerai bien modifier ça ^^

 

regarde cette astuce je pense qu'elle peut t'aider:

 

http://www.astwinds.com/astuces/internet%2...liser%20IE.html

 

 

Lance ewido en mode normal

 

@+

Spartan Member

Spartan

Posté(e)
  • Auteur
Posté(e) (modifié)

antivir est encore present:

 

O4 - HKLM\..\Run: [update] C:\Program Files\AntiVir PersonalEdition Classic\preupd.exe /CALLSCHEDULER /DM="0" /CALLSCHEDULER

 

Non je t'assure qu'il est desinstallé

Modifié par Spartan
bruce lee Devil Member !

bruce lee

Posté(e)
Posté(e)

re,

 

Ok, alors apres que le scan avec ewido soit terminé, tu coches cette ligne avec hijackthis:

 

O4 - HKLM\..\Run: [update] C:\Program Files\AntiVir PersonalEdition Classic\preupd.exe /CALLSCHEDULER /DM="0" /CALLSCHEDULER

 

 

et tu la fixes

 

supprime ce qui est en gras:

 

C:\Program Files\ AntiVir PersonalEdition Classic<== tout le dossier

Spartan Member

Spartan

Posté(e)
  • Auteur
Posté(e)

Re,

 

Voici le rapport Ewido :

 

---------------------------------------------------------

ewido anti-spyware - Scan Report

---------------------------------------------------------

 

+ Created at: 23:21:19 07/25/2006

 

+ Scan result:

 

 

 

HKLM\SOFTWARE\Classes\CLSID\{804DB5C7-31E6-4885-850A-F1941B58A4C7} -> Adware.Generic : Cleaned with backup (quarantined).

HKLM\SOFTWARE\Classes\CLSID\{D240DC29-C093-4388-B71F-A7103C796B0C} -> Adware.Generic : Cleaned with backup (quarantined).

C:\Program Files\Media Access -> Adware.MediaAccess : Cleaned with backup (quarantined).

C:\Program Files\Media Access\Info.txt -> Adware.MediaAccess : Cleaned with backup (quarantined).

C:\Program Files\Media Access\MediaAccC.dll -> Adware.MediaAccess : Cleaned with backup (quarantined).

C:\Program Files\Media Access\MediaAccK.exe -> Adware.MediaAccess : Cleaned with backup (quarantined).

C:\Program Files\Media Access\MediaAccess.exe -> Adware.MediaAccess : Cleaned with backup (quarantined).

C:\RECYCLER\S-1-5-21-1844237615-706699826-1708537768-1000\Dc3818\kmmup.exe -> Adware.Xupiter : Cleaned with backup (quarantined).

C:\RECYCLER\S-1-5-21-1844237615-706699826-1708537768-1000\Dc3811.0ip/MSN Password Finder v2.0.exe -> Not-A-Virus.HackTool.Win32.MSNPass.b : Ignored.

C:\Program Files\PaqTool\keylog\icosdll.dll -> Not-A-Virus.Monitor.Win32.PaqTool.a : Ignored.

:mozilla.89:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.

:mozilla.130:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.154:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.163:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.164:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.195:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.234:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.235:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.261:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.71:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.72:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.293:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.

:mozilla.294:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.

:mozilla.116:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.

:mozilla.117:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.

:mozilla.48:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.

:mozilla.49:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.

:mozilla.75:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.

:mozilla.76:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.

:mozilla.77:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.

:mozilla.78:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.

:mozilla.125:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.

:mozilla.183:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.

:mozilla.34:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.

:mozilla.51:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.

:mozilla.176:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.

:mozilla.177:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.

:mozilla.178:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.

:mozilla.230:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.

:mozilla.179:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Com : Cleaned.

:mozilla.128:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.

:mozilla.129:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.

:mozilla.130:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.

:mozilla.50:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.

:mozilla.94:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.

:mozilla.146:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Estat : Cleaned.

:mozilla.37:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Estat : Cleaned.

:mozilla.110:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.111:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.112:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.299:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.300:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.301:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.302:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.303:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.231:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.

:mozilla.65:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.

:mozilla.133:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.

:mozilla.134:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.

:mozilla.135:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.

:mozilla.136:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.

:mozilla.175:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.

:mozilla.176:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.

:mozilla.220:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.

:mozilla.66:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.

:mozilla.252:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.

:mozilla.253:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.

:mozilla.254:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.

:mozilla.126:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.

:mozilla.225:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.

:mozilla.120:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.121:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.122:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.123:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.124:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.198:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.199:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.200:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.201:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.202:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.209:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.

:mozilla.210:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.

:mozilla.211:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.

:mozilla.10:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.6:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.7:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.84:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.85:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.86:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.8:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.9:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.162:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.

:mozilla.100:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.61:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.62:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.122:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.

:mozilla.123:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.

:mozilla.17:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.18:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.20:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.21:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.91:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.92:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.93:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.138:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

:mozilla.139:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

 

 

::Report end

 

 

 

Et j'ai verifie dans C:\Program Files\ , il n'y a pas de AntiVir PersonalEdition Classic

bruce lee Devil Member !

bruce lee

Posté(e)
Posté(e)

Bonjour,

 

Ewido a fait le menage, mais on va verifié si il en reste:

 

Fais un scan en ligne avec http://webscanner.kaspersky.fr/

 

Sous Démonstration en ligne , on t'explique la marche à suivre , et pour lancer le scan il faut sélectionner Exécuter l'analyse en ligne .Le scan ne marche que sous Internet Explorer.

On va te demander de télécharger un contôle active x, accepte .

Dans le menu Choisissez la cible de l'analyse , sélectionne Poste de travail .

Le scan va commencer.Poste le rapport qui sera généré stp.

 

Si il y a un problème, assure toi que les contrôles active x sont bien configurés dans les options internet comme

 

décrit sur ce lien=> http://www.inoculer.com/activex.php3

 

NOTE: le scan est a faire avec Internet Explorer

Spartan Member

Spartan

Posté(e)
  • Auteur
Posté(e)

Re, bon l'analyse est faite (après 4H30 d'analyse) je la poste dans 10 min

 

 

Et je confirme, mon Antivirus- Firewall F-Secure ne s'enclenche plus au démarrage, on a du viré un truc sur HijackThis (dans les lignes 04) ... au cas ou tu retrouves le truc qui cloche ^^

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...