Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Mon pc est infecté par un virus Win32: TratBHO [Tri]

mamkangourou

Par mamkangourou
dans Analyses et éradication malwares

 Partager

Messages recommandés

mamkangourou Junior Member

mamkangourou

Posté(e)
Posté(e) (modifié)

Bonsoir, j'avais Avast comme antivirus ( :P je ne savais pas qu'il n'était pas efficace) et j'ai attrapé un trojan ou virus hier. C'est le fichu Win 32: TratBHO [Tri] .J'ai bien lu les tutos et voici le rapport de HijackThis. Merci à l'avance pour votre aide. :P

 

Logfile of HijackThis v1.99.1

Scan saved at 20:23:48, on 28/01/2008

Platform: Unknown Windows (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16575)

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\ASUS\ATK Media\DMedia.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\ScanSoft\OmniPageSE4.0\OpWareSE4.exe

C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\Program Files\ASUS\Asus MultiFrame\MultiFrame.exe

C:\Windows\system32\wuauclt.exe

C:\Program Files\WinRAR\WinRAR.exe

C:\PROGRA~1\MOZILL~1\FIREFOX.EXE

C:\Users\MAMKAN~1\AppData\Local\Temp\Rar$EX00.477\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot

O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\MAMKAN~1\AppData\Local\Temp\wvutq.dll,#1

O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\MAMKAN~1\AppData\Local\Temp\oppml.dll,c

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - Global Startup: Logitech SetPoint.lnk = ?

O4 - Global Startup: MultiFrame.lnk = ?

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll

O11 - Options group: [iNTERNATIONAL] International*

O13 - Gopher Prefix:

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)

O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)

O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

Modifié par mamkangourou

Zonk Godlike Member

Zonk

Posté(e)
Posté(e) (modifié)

Allo et bienvenue sur le forum ! :P

 

Ce que je te recommande est un minimum demandé par l' "Équipe Sécurité" ...et prend le temps de tout lire avant de commencer . Ça te donnera une idée des étapes (facile :P ) et des procédures à faire .....et en ayant une idée claire ça te sauvera ,peut être ,de possible dédoublements de manipulations .

 

Suppression des fichiers temporaires

Télécharge ATF Cleaner par Atribune (gratuit)

ATF

 

Double-clique ATF-Cleaner.exe afin de lancer le programme

Petit programme gratuit ne necessitant pas d'installation ,sans danger. Parfois avec les ordis moins performants le nettoyage est lourd ,alors y aller deux cases à la fois. (si tes cookies te sont précieux ,exclu les)

 

Sous l'onglet Main, choisis : Select All (ou deux cases à la fois....mais fait toutes les cases )

 

Si tu utilises le navigateur Firefox :

  1. Clique Firefox au haut et choisis : Select All
  2. Clique le bouton Empty Selected

NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

 

Si tu utilises le navigateur Opera :

  1. Clique Opera au haut et choisis : Select All
  2. Clique le bouton Empty Selected

NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

Clique Exit, du menu prinicipal, afin de fermer le programme.

Antivirus Antivir Classic (free) :P

Le téléchargement est dans le lien du pré-nettoyage...mais ne commence pas tout de suite cette procédure

de pré-nettoyage.....seulement aller chercher le fichier d'installation Antivir et enregistre le sur ton bureau

Téléchargement Antivir et Pré-Nettoyage

Avant d'installer Antivir,désactive ton antivirus durant tout le temps de ces procédures (c'est rare que des conflits majeurs surviennent mais comme exemple ,Antivir et Kaspersky ne font pas bon ménage ...surtout lors d'un redémarrage.

http://forum.zebulon.fr/index.php?showtopi...p;#entry1154506

 

Tutoriel Antivir

 

.....surveille à bien activer la recherche de " rootkits" et "scan master boot sector" (ces fonctions sont souvent oubliées par les gens).....

Cherche à activer le mode "Expert" et à optimiser la recherche des menaces...

(et personnellement dans l'onglet "scanner" j'active tout les items dans "Rootkit search" et "manual selection" )

Aide en image message #184

Aide en image message #113

Enlève les cd ou dvd qui peuvent être dans les lecteurs car ils seront analysés inutilement lors de vérifications

Avast :P

Selon les infos retrouvées ici ,Avast perd des plumes...malheureusement car foncièrement c'est un bon produit .Donc à toi d'y voir pour ce qui est du destin de celui-ci.

 

http://forum.zebulon.fr/index.php?showtopic=123053

http://forum.zebulon.fr/index.php?showtopic=127217

 

Demeure que l'un de ces deux antivirus doit obligatoirement disparaitre.

Si Avast et Antivir cohabite quelques instants, pense à désactiver Avast avant d'installer Antivir et garde Avast déactivé tant et aussi longtemps que Antivir sera présent.

 

Si Antivir t'intéresse:

Suppression d'Avast ? :P

-Désactiver Avast

-Terminer les processus Avast (certains parfois refusent d'être "terminer"...rien de bien grave et tu poursuis la démarche malgré tout

en allant :Pémarrer /Exécuter et tapez taskmgr

Processus Avast à "Terminer"

  • AshDisp.exe
  • Asmaisv.exe
  • ashserv.exe
  • ashwebsv.exe
  • aawservice.exe
  • aswupdsv.exe

tu auras un message de Windows t'avisant de la possible pertes de données et d'instabilité, etc....c'est un message normal dans ces circonstances...et sans danger pour le moment car tu ne touche pas à Windows...

Ensuite tu vas tout de go à Ajout /Supp de programmes et tu supprimes Avast antivirus

.......en cas de problème lors de la désinstallation

Outil de désinstallation Avast

 

 

 

Ewido

va voir le message #14 de Ogu

..je préfère te faire travailler avec Ewido plutot que AVG Antispyware vu que tu as Windows Defender

 

http://forum.zebulon.fr/index.php?showtopic=137868&hl=

 

Le Pré-Nettoyage de Megataupe

:P

 

Pré-Nettoyage

Imprime le texte car en mode sans échec tu ne pourra avoir accès au net (tu auras les infos pour y aller dans le lien du pré-nettoyage). Parfois démarrer/fermer est plus long en mode sans échec...soit patient. L'affichage sera altéré...c'est normal....ca reviendra normal suite à un redémarrage .

 

Profite du mode sans échec pour passer tout tes logiciels de nettoyage en ce mode (AVG Antipsyware et cie)...

On parle de supprimer Antivir suite à ce nettoyage ,alors prenant pour acquis qu'il est ton antvirus ,tu oublies la suppression de celui-ci ......

 

Si parfois tu gardes Avast ,alors désactive Avast durant le pré-nettoyage et durant tout le temps ou Antivir est activé (si tu désires malgré tout garder Avast :P ,alors tu devras obligatoirement supprimer Antivir...tu auras la procédure dans le lien du pré-nettoyage).

 

Souvent le pré-nettoyage n'est pas suffisant pour tout supprimer...mais ça peut arriver que ça règle les ennuis...alors ça prendra tous tes rapports et ensuite l'Équipe Sécurité te guidera pour parfaire le travail....ou te confirmer que tout est sain :P

 

Vérification des logiciels non sécuritaires

 

Quand tu auras quelques minutes:

Secunia Software Inspector

Ce test ne nécessite aucune installation de logiciel

  • Va à "Start Now"
  • Tu devras accepter l'analyse (sans obligation de cocher la petite case "Toujours faire confiance au contenu....." ) et ensuite tu fais "Exécuter"

2b64ebf417a6609871e91d50b5c1ct.jpg

  • Ensuite tu dois aller à "Start"
  • active la petite case à :

Enable thorough system inspection.

Enable the Secunia Software Inspector to search for software installed in non-default locations.

....et suit les recommandations....

 

@+

Modifié par Zonk
mamkangourou Junior Member

mamkangourou

Posté(e)
  • Auteur
Posté(e) (modifié)

:P merci pour votre réponse. J'ai déjà fait toutes ces étapes. (suivi les étapes sur le topic "pré nettoyage dun pc infecté"). J'ai bien suivi les 4 phases à effectuer avant de faire le scan avec Hijackthis. J'ai fait un copie coller du raport sur mon premier post.

:P

 

Maintenant je ne sais plus quoi faire de ce rapport et comment supprimer définitivement ce virus. :P

Modifié par mamkangourou
mamkangourou Junior Member

mamkangourou

Posté(e)
  • Auteur
Posté(e)

Désolée pour les ajouts. Je viens de faire ATF et EWIDO comme vous me l'avez conseillé. Voici le rapport EWIDO:

 

__________________________________________________

ewido anti-spyware online scanner

http://www.ewido.net

__________________________________________________

 

 

Name: TrackingCookie.2o7

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@2o7[2].txt

Risk: Medium

 

Name: TrackingCookie.Yieldmanager

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@ad.yieldmanager[2].txt

Risk: Medium

 

Name: TrackingCookie.Adbrite

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@adbrite[2].txt

Risk: Medium

 

Name: TrackingCookie.Adbrite

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@ads.adbrite[1].txt

Risk: Medium

 

Name: TrackingCookie.Advertising

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@advertising[2].txt

Risk: Medium

 

Name: TrackingCookie.Adviva

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@adviva[2].txt

Risk: Medium

 

Name: TrackingCookie.Atdmt

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@atdmt[2].txt

Risk: Medium

 

Name: TrackingCookie.Bluestreak

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@bluestreak[2].txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@bs.serving-sys[1].txt

Risk: Medium

 

Name: TrackingCookie.Doubleclick

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@doubleclick[1].txt

Risk: Medium

 

Name: TrackingCookie.Estat

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@estat[1].txt

Risk: Medium

 

Name: TrackingCookie.Mediaplex

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@mediaplex[1].txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@msnaccountservices.112.2o7[1].txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@msnportal.112.2o7[1].txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@paypal.112.2o7[1].txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@serving-sys[1].txt

Risk: Medium

 

Name: TrackingCookie.Smartadserver

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@smartadserver[2].txt

Risk: Medium

 

Name: TrackingCookie.Tradedoubler

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@tradedoubler[2].txt

Risk: Medium

 

Name: TrackingCookie.Weborama

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\Low\mamkangourou@weborama[1].txt

Risk: Medium

 

Name: TrackingCookie.Atdmt

Path: C:\Users\Mamkangourou\AppData\Roaming\Microsoft\Windows\Cookies\mamkangourou@atdmt[1].txt

Risk: Medium

 

Name: Not-A-Virus.Adware.Virtumonde

Path: C:\Users\Mamkangourou\AppData\Local\Temp\removalfile.bat

Risk: Low

 

Name: TrackingCookie.Estat

Path: :mozilla.6:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Weborama

Path: :mozilla.48:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Weborama

Path: :mozilla.49:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Weborama

Path: :mozilla.50:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Tradedoubler

Path: :mozilla.119:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Tradedoubler

Path: :mozilla.120:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Tradedoubler

Path: :mozilla.121:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Tradedoubler

Path: :mozilla.122:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Tradedoubler

Path: :mozilla.123:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Doubleclick

Path: :mozilla.130:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Counted

Path: :mozilla.135:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Bluestreak

Path: :mozilla.150:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Advertising

Path: :mozilla.151:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Advertising

Path: :mozilla.152:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Advertising

Path: :mozilla.153:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Advertising

Path: :mozilla.154:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Advertising

Path: :mozilla.155:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Smartadserver

Path: :mozilla.157:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Smartadserver

Path: :mozilla.158:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Smartadserver

Path: :mozilla.159:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Smartadserver

Path: :mozilla.160:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adtech

Path: :mozilla.173:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adtech

Path: :mozilla.174:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adviva

Path: :mozilla.175:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Smartadserver

Path: :mozilla.227:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Smartadserver

Path: :mozilla.228:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Smartadserver

Path: :mozilla.229:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Atdmt

Path: :mozilla.247:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Statcounter

Path: :mozilla.261:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Statcounter

Path: :mozilla.262:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Statcounter

Path: :mozilla.263:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Statcounter

Path: :mozilla.264:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Imrworldwide

Path: :mozilla.293:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Imrworldwide

Path: :mozilla.294:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Yieldmanager

Path: :mozilla.295:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Yieldmanager

Path: :mozilla.296:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Yieldmanager

Path: :mozilla.297:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Yieldmanager

Path: :mozilla.298:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Yieldmanager

Path: :mozilla.299:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adbrite

Path: :mozilla.300:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adbrite

Path: :mozilla.304:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Zedo

Path: :mozilla.306:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Zedo

Path: :mozilla.307:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Zedo

Path: :mozilla.308:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Zedo

Path: :mozilla.309:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Questionmarket

Path: :mozilla.317:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Questionmarket

Path: :mozilla.318:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.322:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.323:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.324:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.325:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.326:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.327:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.328:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.329:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.330:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.331:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.332:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.333:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.334:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.335:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.336:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.337:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.338:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.339:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.340:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.341:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.343:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.344:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.345:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.346:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.347:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.348:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.349:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.350:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.351:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.352:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.353:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.354:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.355:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.356:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.357:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.358:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Pointroll

Path: :mozilla.361:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Pointroll

Path: :mozilla.362:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Pointroll

Path: :mozilla.363:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Pointroll

Path: :mozilla.364:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Pointroll

Path: :mozilla.365:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Pointroll

Path: :mozilla.366:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Pointroll

Path: :mozilla.367:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Findwhat

Path: :mozilla.407:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adrevolver

Path: :mozilla.409:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adrevolver

Path: :mozilla.410:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adrevolver

Path: :mozilla.411:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adrevolver

Path: :mozilla.412:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adrevolver

Path: :mozilla.413:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adrevolver

Path: :mozilla.414:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adrevolver

Path: :mozilla.415:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Adrevolver

Path: :mozilla.416:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Hitbox

Path: :mozilla.436:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Hitbox

Path: :mozilla.437:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Hitbox

Path: :mozilla.438:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.247realmedia

Path: :mozilla.455:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.247realmedia

Path: :mozilla.457:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.247realmedia

Path: :mozilla.458:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.247realmedia

Path: :mozilla.459:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.247realmedia

Path: :mozilla.460:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.247realmedia

Path: :mozilla.461:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.247realmedia

Path: :mozilla.462:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.247realmedia

Path: :mozilla.463:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Sitestat

Path: :mozilla.470:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Sitestat

Path: :mozilla.471:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: :mozilla.481:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: :mozilla.482:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: :mozilla.483:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: :mozilla.484:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: :mozilla.485:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: :mozilla.486:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: :mozilla.487:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Revsci

Path: :mozilla.514:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Revsci

Path: :mozilla.515:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Tacoda

Path: :mozilla.518:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Tacoda

Path: :mozilla.519:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Tacoda

Path: :mozilla.520:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Tacoda

Path: :mozilla.521:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Tacoda

Path: :mozilla.522:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.525:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Googleadservices

Path: :mozilla.533:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Mediaplex

Path: :mozilla.545:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Mediaplex

Path: :mozilla.546:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Webtrendslive

Path: :mozilla.548:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Overture

Path: :mozilla.594:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Overture

Path: :mozilla.595:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Overture

Path: :mozilla.596:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.597:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Planetactive

Path: :mozilla.682:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.696:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Liveperson

Path: :mozilla.702:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Liveperson

Path: :mozilla.705:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.733:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Googleadservices

Path: :mozilla.759:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.786:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Hitbox

Path: :mozilla.787:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Hitbox

Path: :mozilla.788:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Hitbox

Path: :mozilla.790:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Hitbox

Path: :mozilla.791:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Hitbox

Path: :mozilla.792:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Sitestat

Path: :mozilla.882:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Sitestat

Path: :mozilla.883:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Webtrends

Path: :mozilla.895:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: :mozilla.927:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

 

Name: TrackingCookie.Clickhype

Path: :mozilla.931:C:\Users\Mamkangourou\AppData\Roaming\Mozilla\Firefox\Profiles\7yrajdky.default\cookies.txt

Risk: Medium

Zonk Godlike Member

Zonk

Posté(e)
Posté(e)

Infection Vundo.....que Ewido a vu....

as tu une amélioration???

....Vundo (Virtumonde) est très tenace...normalement pas dangereux....mais assez fatiguant....

@+

mamkangourou Junior Member

mamkangourou

Posté(e)
  • Auteur
Posté(e)

Et voici le nouveau rappot de HijackTHis:

 

Logfile of HijackThis v1.99.1

Scan saved at 00:22:05, on 29/01/2008

Platform: Unknown Windows (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16575)

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\ASUS\ATK Media\DMedia.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\ScanSoft\OmniPageSE4.0\OpWareSE4.exe

C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\Program Files\ASUS\Asus MultiFrame\MultiFrame.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\system32\wuauclt.exe

C:\Program Files\WinRAR\WinRAR.exe

C:\Users\MAMKAN~1\AppData\Local\Temp\Rar$EX01.233\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot

O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\MAMKAN~1\AppData\Local\Temp\wvutq.dll,#1

O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\MAMKAN~1\AppData\Local\Temp\oppml.dll,c

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - Global Startup: Logitech SetPoint.lnk = ?

O4 - Global Startup: MultiFrame.lnk = ?

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll

O11 - Options group: [iNTERNATIONAL] International*

O13 - Gopher Prefix:

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)

O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)

O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

 

Merci à l'avance.

mamkangourou Junior Member

mamkangourou

Posté(e)
  • Auteur
Posté(e)
Infection Vundo.....que Ewido a vu....

as tu une amélioration???

....Vundo (Virtumonde) est très tenace...normalement pas dangereux....mais assez fatiguant....

@+

 

 

Comment puis je me débarasser d'une infection Vundo?

 

Depuis que j'ai viré Avast et installé Avira je n'ai plus de messages qui apparait à tout bout de champ. Mais cela signifie -t-il que je n'ai plus de virus?

 

Voici le rapport de mon dernier scan Antivir:

 

 

 

AntiVir PersonalEdition Classic

Report file date: mardi 29 janvier 2008 13:17

 

Scanning for 1083693 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows Vista

Windows version: (plain) [6.0.6000]

Username: SYSTEM

Computer name: PC-DE-MAMKANGOU

 

Version information:

BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00

AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29

AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51

LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47

LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15

ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 11:20:15

ANTIVIR2.VDF : 7.0.2.49 1339904 Bytes 25/01/2008 11:20:15

ANTIVIR3.VDF : 7.0.2.64 181760 Bytes 29/01/2008 11:20:15

AVEWIN32.DLL : 7.6.0.57 3215872 Bytes 29/01/2008 11:20:15

AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26

AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17

AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24

AVPACK32.DLL : 7.6.0.3 360488 Bytes 29/01/2008 11:20:15

AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06

AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33

AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18

NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42

RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13

RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37

SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

 

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: D:,

Scan memory......................: on

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: on

Scan all files...................: All files

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,

 

Start of the scan: mardi 29 janvier 2008 13:17

 

Starting search for hidden objects.

'72920' objects were checked, '0' hidden objects were found.

 

The scan of running processes will be started

Scan process 'avconfig.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'AcroRd32.exe' - '1' Module(s) have been scanned

Scan process 'uTorrent.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'firefox.exe' - '1' Module(s) have been scanned

Scan process 'livecall.exe' - '1' Module(s) have been scanned

Scan process 'usnsvc.exe' - '1' Module(s) have been scanned

Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned

Scan process 'MultiFrame.exe' - '1' Module(s) have been scanned

Scan process 'LogitechDesktopMessenger.exe' - '1' Module(s) have been scanned

Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned

Scan process 'jusched.exe' - '1' Module(s) have been scanned

Scan process 'OpWareSE4.exe' - '1' Module(s) have been scanned

Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned

Scan process 'DMedia.exe' - '1' Module(s) have been scanned

Scan process 'RtHDVCpl.exe' - '1' Module(s) have been scanned

Scan process 'MSASCui.exe' - '1' Module(s) have been scanned

Scan process 'ALU.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'dwm.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'StkCSrv.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'StarWindServiceAE.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'ACEngSvr.exe' - '1' Module(s) have been scanned

Scan process 'ATKOSD.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'BatteryLife.exe' - '1' Module(s) have been scanned

Scan process 'ACMON.exe' - '1' Module(s) have been scanned

Scan process 'wcourier.exe' - '1' Module(s) have been scanned

Scan process 'HControl.exe' - '1' Module(s) have been scanned

Scan process 'ASLDRSrv.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'SLsvc.exe' - '1' Module(s) have been scanned

Scan process 'audiodg.exe' - '0' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'lsm.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'wininit.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

62 processes with 62 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[NOTE] No virus was found!

[WARNING] The boot sector file could not be read!

[WARNING] Error code: 0x0057

[NOTE] Please restart the search with Administrator rights

 

Start scanning boot sectors:

Boot sector 'C:\'

[NOTE] No virus was found!

Boot sector 'D:\'

[NOTE] No virus was found!

 

Starting to scan the registry.

The registry was scanned ( '14' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\' <VistaOS>

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\Windows\System32\drivers\sptd.sys

[WARNING] The file could not be opened!

Begin scan in 'D:\' <DATA>

 

 

End of the scan: mardi 29 janvier 2008 14:04

Used time: 47:23 min

 

The scan has been done completely.

 

12394 Scanning directories

283771 Files were scanned

0 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

0 files were deleted

0 files were repaired

0 files were moved to quarantine

0 files were renamed

2 Files cannot be scanned

283771 Files not concerned

1946 Archives were scanned

2 Warnings

0 Notes

72920 Objects were scanned with rootkit scan

0 Hidden objects were found

Zonk Godlike Member

Zonk

Posté(e)
Posté(e)

Vundo se nettoye......donc ne te décourage pas ! :P

.....reste à attendre l'Équipe Sécurité pour savoir ce qui en est pour ton ordi.....reste à attendre ...

@+

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour Zonk,mamkangourou,

 

Télécharger VundoFix.exe (par Atribune) sur leBureau.

http://www.atribune.org/ccount/click.php?id=4

* Double-cliquer VundoFix.exe afin de le lancer

* Cliquer sur le bouton Scan for Vundo

* Lorsque le scan est complété, cliquer sur le bouton Remove Vundo

* Une invite demandera de supprimer les fichiers, cliquer YES

* Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers

* Une invite annonce que le PC va redémarrer; cliquer OK

* Copier/coller le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans la prochaine réponse

 

Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "cliquer sur le bouton Scan for Vundo".

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...