Suivi desinstallation Winfixer

espace · le 5 juillet 2006

Ci joint rapport Ewido

ewido anti-spyware - Scan Report

---------------------------------------------------------

+ Created at: 19:08:28 05/07/2006

+ Scan result:

HKU\S-1-5-21-515967899-2139871995-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2178F3FB-2560-458F-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@247realmedia[2].txt -> TrackingCookie.247realmedia : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@2o7[2].txt -> TrackingCookie.2o7 : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@gfi.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@lsfnetwork.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@msninvite.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@adtech[2].txt -> TrackingCookie.Adtech : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@advertising[1].txt -> TrackingCookie.Advertising : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@bluestreak[2].txt -> TrackingCookie.Bluestreak : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@iv2.bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@casinotropez[2].txt -> TrackingCookie.Casinotropez : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@promo.casinotropez[1].txt -> TrackingCookie.Casinotropez : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@vip.clickzs[2].txt -> TrackingCookie.Clickzs : No action taken.

D:\Documents and Settings\Vincent\Cookies\vincent@com[2].txt -> TrackingCookie.Com : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@c.enhance[1].txt -> TrackingCookie.Enhance : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@www.epilot[1].txt -> TrackingCookie.Epilot : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@estat[2].txt -> TrackingCookie.Estat : No action taken.

D:\Documents and Settings\Vincent\Cookies\vincent@estat[1].txt -> TrackingCookie.Estat : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@www.etracker[2].txt -> TrackingCookie.Etracker : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@as-eu.falkag[1].txt -> TrackingCookie.Falkag : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@as1.falkag[1].txt -> TrackingCookie.Falkag : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@sel.as-eu.falkag[1].txt -> TrackingCookie.Falkag : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@findwhat[1].txt -> TrackingCookie.Findwhat : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@ilead.itrack[1].txt -> TrackingCookie.Itrack : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@overture[2].txt -> TrackingCookie.Overture : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@ads.pointroll[1].txt -> TrackingCookie.Pointroll : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@questionmarket[2].txt -> TrackingCookie.Questionmarket : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@revenue[2].txt -> TrackingCookie.Revenue : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@serving-sys[1].txt -> TrackingCookie.Serving-sys : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@smartadserver[1].txt -> TrackingCookie.Smartadserver : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@spylog[1].txt -> TrackingCookie.Spylog : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@statcounter[2].txt -> TrackingCookie.Statcounter : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@tradedoubler[3].txt -> TrackingCookie.Tradedoubler : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@trafficmp[1].txt -> TrackingCookie.Trafficmp : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@valueclick[2].txt -> TrackingCookie.Valueclick : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@valueclick[3].txt -> TrackingCookie.Valueclick : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@weborama[2].txt -> TrackingCookie.Weborama : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@yadro[1].txt -> TrackingCookie.Yadro : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : No action taken.

C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@zedo[1].txt -> TrackingCookie.Zedo : No action taken.

::Report end

puis le rapport log Hijackthis

Logfile of HijackThis v1.99.1

Scan saved at 19:20:37, on 05/07/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe

C:\Program Files\Executive Software\Diskeeper\DkService.exe

C:\Program Files\ewido anti-spyware 4.0\guard.exe

C:\WINDOWS\System32\FTRTSVC.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe

C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe

C:\Program Files\Raxco\PerfectDisk\PDSched.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\PROGRA~1\Wanadoo\TaskBarIcon.exe

C:\Program Files\ewido anti-spyware 4.0\ewido.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\WINDOWS\system32\ntvdm.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE

D:\LOGICIEL\Hijackthis\HijackThis.exe

C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll

O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll

O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe

O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe

O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay

O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - Startup: Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html

O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html

O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html

O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe

O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe

O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)

O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - https://scan.safety.live.com/resource/downl...lscbase3401.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1141305489515

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1141320056171

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe

O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe

O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe

O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe

O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe

O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE

O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe

O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe

O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

Et enfin le rapport panda

Incident Statut Analyse

Outil indésirable:application/winantivirus2006 No Désinfecté c:\program files\WinAntiVirus Pro 2006

Adware:adware/cws No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Favoris\Shop

Outil indésirable:Application/Processor No Désinfecté C:\Documents and Settings\Administrateur\Bureau\VundoFix\VundoFix\process.exe

Spyware:Cookie/RealMedia No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@247realmedia[2].txt

Spyware:Cookie/2o7 No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@2o7[2].txt

Spyware:Cookie/888 No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@888[1].txt

Spyware:Cookie/YieldManager No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@ad.yieldmanager[2].txt

Spyware:Cookie/Hbmediapro No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@adopt.hbmediapro[2].txt

Spyware:Cookie/PointRoll No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@ads.pointroll[1].txt

Spyware:Cookie/Adtech No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@adtech[2].txt

Spyware:Cookie/Advertising No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@advertising[1].txt

Spyware:Cookie/Apmebf No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@apmebf[2].txt

Spyware:Cookie/Falkag No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@as-eu.falkag[1].txt

Spyware:Cookie/Falkag No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@as1.falkag[1].txt

Spyware:Cookie/Atlas DMT No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@atdmt[2].txt

Spyware:Cookie/Atwola No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@atwola[1].txt

Spyware:Cookie/Belnk No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@belnk[2].txt

Spyware:Cookie/Bluestreak No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@bluestreak[2].txt

Spyware:Cookie/bravenetA No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@bravenet[1].txt

Spyware:Cookie/Serving-sys No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@bs.serving-sys[1].txt

Spyware:Cookie/Enhance No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@c.enhance[1].txt

Spyware:Cookie/Casinotropez No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@casinotropez[2].txt

Spyware:Cookie/Cassava No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@cassava[1].txt

Spyware:Cookie/Cgi-bin No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@cgi-bin[1].txt

Spyware:Cookie/Cgi-bin No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@cgi-bin[5].txt

Spyware:Cookie/cs.sexcounter No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@cs.sexcounter[2].txt

Spyware:Cookie/Belnk No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@dist.belnk[2].txt

Spyware:Cookie/Doubleclick No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@doubleclick[1].txt

Spyware:Cookie/fe.lea.lycos No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@fe.lea.lycos[1].txt

Spyware:Cookie/Findwhat No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@findwhat[1].txt

Spyware:Cookie/Comclick No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@fl01.ct2.comclick[1].txt

Spyware:Cookie/Itrack No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@ilead.itrack[1].txt

Spyware:Cookie/Mediaplex No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@mediaplex[1].txt

Spyware:Cookie/Overture No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@overture[2].txt

Spyware:Cookie/QuestionMarket No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@questionmarket[2].txt

Spyware:Cookie/WUpd No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@revenue[2].txt

Spyware:Cookie/Rn11 No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@rn11[2].txt

Spyware:Cookie/Searchportal No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@searchportal.information[2].txt

Spyware:Cookie/Falkag No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@sel.as-eu.falkag[1].txt

Spyware:Cookie/Server.iad.Liveperson No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@server.iad.liveperson[1].txt

Spyware:Cookie/Serving-sys No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@serving-sys[1].txt

Spyware:Cookie/Smartadserver No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@smartadserver[1].txt

Spyware:Cookie/SpyLog No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@spylog[1].txt

Spyware:Cookie/Statcounter No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@statcounter[2].txt

Spyware:Cookie/Reliablestats No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@stats1.reliablestats[1].txt

Spyware:Cookie/Tradedoubler No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@tradedoubler[3].txt

Spyware:Cookie/Traffic Marketplace No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@trafficmp[1].txt

Spyware:Cookie/Valueclick No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@valueclick[2].txt

Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@weborama[2].txt

Spyware:Cookie/Seeq No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@www48.seeq[1].txt

Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@xiti[1].txt

Spyware:Cookie/Yadro No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@yadro[1].txt

Spyware:Cookie/Zedo No Désinfecté C:\Documents and Settings\Vincent CUNAUD\Cookies\vincent cunaud@zedo[1].txt

Outil indésirable:Application/Winantivirus2006 No Désinfecté C:\Program Files\Common Files\Companion Wizard\WapCHK.dll

Outil indésirable:Application/Winantivirus2006 No Désinfecté C:\Program Files\Common Files\Companion Wizard\WapCHK{B4B4AFB1-5AC5-47DF-8B1D-4D65C9612C36}.dll

Outil indésirable:Application/Winantivirus2006 No Désinfecté C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exe

Outil indésirable:Application/Winantivirus2006 No Désinfecté C:\Program Files\WinAntiVirus Pro 2006\RulSrv.dll

Outil indésirable:Application/Winantivirus2006 No Désinfecté C:\Program Files\WinAntiVirus Pro 2006\WAV6COM.dll

Outil indésirable:Application/Winantivirus2006 No Désinfecté C:\Program Files\WinAntiVirus Pro 2006\winpgi.dll

Spyware:Cookie/Gorillanation No Désinfecté D:\Documents and Settings\Vincent\Cookies\vincent@ads.gorillanation[1].txt

Spyware:Cookie/Com.com No Désinfecté D:\Documents and Settings\Vincent\Cookies\vincent@com[2].txt

Spyware:Cookie/fe.lea.lycos No Désinfecté D:\Documents and Settings\Vincent\Cookies\vincent@fe.lea.lycos[2].txt

Spyware:Cookie/Kount No Désinfecté D:\Documents and Settings\Vincent\Cookies\vincent@kount[1].txt

Spyware:Cookie/Xiti No Désinfecté D:\Documents and Settings\Vincent\Cookies\vincent@xiti[1].txt

Outil indésirable:Application/Processor No Désinfecté D:\LOGICIEL\VundoFix\vundofix.exe[process.exe]

Outil indésirable:Application/FunWeb No Désinfecté D:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL

Outil indésirable:Application/MyWebSearch No Désinfecté D:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL

Outil indésirable:Application/MyWebSearch No Désinfecté D:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL

Outil indésirable:Application/FunWeb No Désinfecté D:\WINDOWS\Downloaded Program Files\f3initialsetup1.0.0.8-2.inf

bibi26 · le 5 juillet 2006

Bonjour espace,

Il aurait été bien que tu ne fasses pas un nouveau topic, mais bon....

1-Retourne dans Ajout/Suppression de programmes et supprime les logiciels suivants :

-MyWebSearch : Inclut un spyware, à enlever

-WinAntiVirusPro2006 : FAUX antivirus, supprime tout ce qui a un nom du genre WinAntiVirus

As-tu enlever EoRezo ou as-tu choisi de le garder ?

2-Supprime les dossiers suivants (si tu les trouves) :

-C:\Program Files\WinAntiVirus Pro 2006

-C:\Program Files\Common Files\Companion Wizard

-D:\Program Files\MyWebSearch

3-Télécharge CWShredder : http://www.trendmicro.com/ftp/products/onl.../cwshredder.exe

Ouvre-le et clique sur "I AGREE", clique sur "Fix". Attend que l'analyse se termine et clique sur Next ! Clique sur "Exit" et note ce que CWShredder a trouvé

4-Après, fait un nouveau log hijackthis et poste le dans ce topic !! Dit moi aussi ce que CWShredder a trouvé !

Modifié le 5 juillet 2006 par bibi26

espace · le 5 juillet 2006

Bonsoir BiBI,

Désolé pour le topic, mais je débute.

Je n'ai plus Winantivirus, ni MyWebsearch. J'ai également enlevé EoRezo.

Message Cwshreder: Scan is complete! CoolWebSearch was not found on this system.

rapport log Hackjthis:

Logfile of HijackThis v1.99.1

Scan saved at 23:26:36, on 05/07/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe

C:\Program Files\Executive Software\Diskeeper\DkService.exe

C:\Program Files\ewido anti-spyware 4.0\guard.exe

C:\WINDOWS\System32\FTRTSVC.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe

C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe

C:\Program Files\Raxco\PerfectDisk\PDSched.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\ewido anti-spyware 4.0\ewido.exe

C:\PROGRA~1\Wanadoo\TaskBarIcon.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\WINDOWS\system32\ntvdm.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE

C:\Program Files\Wanadoo\GestionnaireInternet.exe

C:\Program Files\Wanadoo\ComComp.exe

C:\PROGRA~1\Wanadoo\Toaster.exe

C:\PROGRA~1\Wanadoo\Inactivity.exe

C:\PROGRA~1\Wanadoo\PollingModule.exe

C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE

C:\Program Files\Wanadoo\Watch.exe

C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe

C:\PROGRA~1\Wanadoo\WOOBRO~1\DownloadManager.exe