j'aurais besoin d'un petite Analyse rapports HijackThis ...

Thanos · le 24 septembre 2006

salut lcaco

Par rapport au demarrage de mon PC effectivement il y a du taff a faire.. Mais comment faire pour proceder a l'optimisation ?

On va le faire ensemble si tu veux On va fixer quelques lignes sur ce rapport hijackthis, la conséquence c'est que certaines applications ne se lanceront plus au démarrage de Windows:ce sont évidemment des applications inutiles au bon fonctionnement du pc et que tu pourra lancer manuellement si tu en a besoin(ca liberera des ressources!)

Si les changement ne te conviennent pas ,tu peux revenir en arrière!

@+ tard avec le rapport de scan !

ps: au fait est ce que tu as accès à Regedit à présent?

lcaco · le 24 septembre 2006

Alors voici le raport :

Logfile of HijackThis v1.99.1

Scan saved at 15:55:33, on 24/09/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\drivers\CDAC11BA.EXE

C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

C:\Program Files\ewido anti-spyware 4.0\guard.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\TortoiseSVN\bin\TSVNCache.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

C:\Program Files\Toshiba\Tvs\TvsTray.exe

C:\WINDOWS\AGRSMMSG.exe

C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe

C:\WINDOWS\system32\TPSMain.exe

C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe

C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe

C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\MessengerPlus! 3\MsgPlus.exe

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\EasyPHP1-8\EasyPHP.exe

C:\Program Files\FilmLoop Player\FilmLoop.exe

C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe

C:\WINDOWS\system32\LVCOMSX.EXE

C:\Program Files\Logitech\Video\LogiTray.exe

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\TPSBattM.exe

C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\PROGRA~1\EASYPH~1\Apache\apache.exe

C:\PROGRA~1\EASYPH~1\MySql\bin\mysqld.exe

C:\Program Files\Logitech\Video\FxSvr2.exe

C:\PROGRA~1\EASYPH~1\Apache\apache.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\Macromedia\Flash 8\Flash.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Program Files\Adobe\Photoshop 7.0\Photoshop.exe

C:\Program Files\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

O4 - HKLM\..\Run: [soundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray

O4 - HKLM\..\Run: [Tvs] C:\Program Files\Toshiba\Tvs\TvsTray.exe

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe

O4 - HKLM\..\Run: [TPSMain] TPSMain.exe

O4 - HKLM\..\Run: [smoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe

O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe

O4 - HKLM\..\Run: [TFncKy] TFncKy.exe

O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [EasyPHP] "C:\Program Files\EasyPHP1-8\EasyPHP.exe"

O4 - HKLM\..\Run: [FilmLoop] "C:\Program Files\FilmLoop Player\FilmLoop.exe" -hide

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"

O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE

O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe

O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: SWF To Video Scout - {B9410B8F-96BB-4F3F-B337-CE76E53D9154} - C:\Program Files\SWF To Video Scout\flashextract.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

O9 - Extra button: Flash Decompiler SWF Capture tool - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\PROGRA~1\ELTIMA~1\FLASHD~1\iebt.dll (HKCU)

O9 - Extra 'Tools' menuitem: Flash Decompiler SWF Capture tool menu - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\PROGRA~1\ELTIMA~1\FLASHD~1\iebt.dll (HKCU)

O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone

O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone

O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone

O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone

O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone

O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone (HKLM)

O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab

O16 - DPF: {7D6EB1E5-ABB4-4957-9AE4-180DB0A13E4C} (ScrapXImpl Class) - http://main.aulivre.com/engine/Program/en/ScrapX.cab

O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/pla...5/Installer.exe

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE

O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe

O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

O23 - Service: wampapache - Unknown owner - c:\wamp\apache2\bin\Apache.exe" -k runservice (file missing)

O23 - Service: wampmysqld - Unknown owner - c:\wamp\mysql\bin\mysqld-nt.exe

Effectivement j'ai acces a "regedit"

Thanos · le 24 septembre 2006

ok pour Regedit!

Je fini mon taff et j'irais faire un ti tour sur panda !

Tu m'a posté un rapport hijackthis, mais pas de rapport Panda

Un petit truc à faire stp:

Relance Zeb Restore et clique sur le bouton suivant => Préfixes et Protocoles Internet : puis tu cliques sur "Restaurer".

Reposte stp un dernier rapport hijackthis et le rappport de Panda

lcaco · le 26 septembre 2006

Coucou

Voici un rapport de panda, mais je n'ai pas pu neutraliser le fichier infecté !

Incident Statut Analyse

Spyware:Cookie/YieldManager No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[ad.yieldmanager.com/]

Spyware:Cookie/FastClick No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.fastclick.net/]

Spyware:Cookie/Advertising No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.advertising.com/]

Spyware:Cookie/Atlas DMT No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.atdmt.com/]

Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.xiti.com/]

Spyware:Cookie/Toplist No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.toplist.cz/]

Spyware:Cookie/DomainSponsor No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[landing.domainsponsor.com/]

Spyware:Cookie/RealMedia No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.realmedia.com/]

Spyware:Cookie/Apmebf No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.apmebf.com/]

Spyware:Cookie/Atwola No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.atwola.com/]

Spyware:Cookie/Belnk No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.belnk.com/]

Spyware:Cookie/ErrorSafe No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.errorsafe.com/]

Spyware:Cookie/Go No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.go.com/]

Spyware:Cookie/GoStats No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.gostats.com/]

Spyware:Cookie/Com.com No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.ig.com.br/]

Spyware:Cookie/MetriWeb No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.metriweb.be/]

Spyware:Cookie/AspinallsOnlineCasino No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[.pacificpoker.com/]

Spyware:Cookie/fe.lea.lycos No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[fe.lea.lycos.fr/]

Spyware:Cookie/Go No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[go.com/]

Spyware:Cookie/Humanclick No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[hc2.humanclick.com/]

Spyware:Cookie/Humanclick No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[hc2.humanclick.com/hc/50382694]

Spyware:Cookie/Advnt No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[www.advnt01.com/]

Spyware:Cookie/Buydomains No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[www47.buydomains.com/]

Spyware:Cookie/Seeq No Désinfecté C:\Documents and Settings\caco\Application Data\Flock\Browser\Profiles\k4jvsnzv.default\cookies.txt[www48.seeq.com/]

Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.xiti.com/]

Spyware:Cookie/Tradedoubler No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.tradedoubler.com/]

Spyware:Cookie/RealMedia No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.247realmedia.com/]

Spyware:Cookie/2o7 No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.2o7.net/]

Spyware:Cookie/Doubleclick No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.doubleclick.net/]

Spyware:Cookie/Bluestreak No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.bluestreak.com/]

Spyware:Cookie/Mediaplex No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.mediaplex.com/]

Spyware:Cookie/Adtech No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.adtech.de/]

Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.weborama.fr/]

Spyware:Cookie/Atlas DMT No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.atdmt.com/]

Spyware:Cookie/Advertising No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.advertising.com/]

Spyware:Cookie/Smartadserver No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.smartadserver.com/]

Spyware:Cookie/Statcounter No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.statcounter.com/]

Spyware:Cookie/Serving-sys No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.serving-sys.com/]

Spyware:Cookie/QuestionMarket No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.questionmarket.com/]

Spyware:Cookie/Serving-sys No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.serving-sys.com/]

Spyware:Cookie/QuestionMarket No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.questionmarket.com/]

Spyware:Cookie/Serving-sys No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.bs.serving-sys.com/]

Spyware:Cookie/QuestionMarket No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.questionmarket.com/]

Spyware:Cookie/YieldManager No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[ad.yieldmanager.com/]

Spyware:Cookie/FastClick No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.fastclick.net/]

Spyware:Cookie/Hitbox No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.hitbox.com/]

Spyware:Cookie/Overture No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.overture.com/]

Spyware:Cookie/Com.com No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.com.com/]

Spyware:Cookie/ErrorSafe No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.errorsafe.com/]

Spyware:Cookie/Toplist No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.toplist.cz/]

Spyware:Cookie/Hbmediapro No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.adopt.hbmediapro.com/]

Spyware:Cookie/Apmebf No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.apmebf.com/]

Spyware:Cookie/Atwola No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.atwola.com/]

Spyware:Cookie/Belnk No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.belnk.com/]

Spyware:Cookie/Go No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.go.com/]

Spyware:Cookie/GoStats No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.gostats.com/]

Spyware:Cookie/Com.com No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.ig.com.br/]

Spyware:Cookie/MetriWeb No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.metriweb.be/]

Spyware:Cookie/AspinallsOnlineCasino No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.pacificpoker.com/]

Spyware:Cookie/RealMedia No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.realmedia.com/]

Spyware:Cookie/Com.com No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Firefox\Profiles\gnsi10j9.default\cookies.txt[.uol.com.br/]

Spyware:Cookie/fe.lea.lycos No Désinfecté C:\Documents and Settings\caco\Application Data\Mozilla\Profiles\default\o6hpmqd9.slt\cookies.txt[fe.lea.lycos.fr/]

Spyware:Cookie/2o7 No Désinfecté C:\Documents and Settings\caco\Cookies\caco@2o7[1].txt

Spyware:Cookie/YieldManager No Désinfecté C:\Documents and Settings\caco\Cookies\caco@ad.yieldmanager[2].txt

Spyware:Cookie/Falkag No Désinfecté C:\Documents and Settings\caco\Cookies\caco@as1.falkag[2].txt

Spyware:Cookie/Bluestreak No Désinfecté C:\Documents and Settings\caco\Cookies\caco@bluestreak[2].txt

Spyware:Cookie/Smartadserver No Désinfecté C:\Documents and Settings\caco\Cookies\caco@smartadserver[1].txt

Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\caco\Cookies\caco@weborama[1].txt

Virus:Trj/Rontobrok.A Désinfecté C:\Documents and Settings\caco\Mes documents\Mes images\about.Brontok.A.html

lcaco · le 26 septembre 2006

Voici le rapport de hijackthis :

Logfile of HijackThis v1.99.1

Scan saved at 17:17:18, on 26/09/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\drivers\CDAC11BA.EXE

C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

C:\Program Files\ewido anti-spyware 4.0\guard.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\TortoiseSVN\bin\TSVNCache.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

C:\Program Files\Toshiba\Tvs\TvsTray.exe

C:\WINDOWS\AGRSMMSG.exe

C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe

C:\WINDOWS\system32\TPSMain.exe

C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe

C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe

C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\MessengerPlus! 3\MsgPlus.exe

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\FilmLoop Player\FilmLoop.exe

C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe

C:\WINDOWS\system32\LVCOMSX.EXE

C:\Program Files\Logitech\Video\LogiTray.exe

C:\WINDOWS\system32\TPSBattM.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\Program Files\Logitech\Video\FxSvr2.exe

C:\WINDOWS\system32\wscntfy.exe