Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[résolu] Trojan Win32:Agent-AEJ

zergova

Par zergova
dans Analyses et éradication malwares

 Partager

Messages recommandés

bruce lee Devil Member !

bruce lee

Posté(e)
Posté(e)

re,

 

Si durant la procedure ci bas, il y a des etapes que tu n'as pas reussi a faire, merci de

continuer la procedure jusqu'au bout et de les signaler dans ta prochaine reponse.

 

a/ Si tu as modifié ton fichier host volontairement, tu ne fixeras pas les deux lignes 01

 

b/ Dans la procedure je te fais enlever ton jeu de poker (risque d'infection) si tu ne veux pas

l'enlever libre a toi.

 

1/Télécharge http://www.ewido.net/en/download/ Ewido anti-spyware

 

Lance Ewido et clique sur le bouton Update (barre d'outils - au haut). Sous Manual Update clique Start update.

 

Tu verras ceci juste au bas, lorsque la mise à jour sera complétée : "Update successful"

 

Ferme Ewido. Ne pas le lancer tout de suite.

 

 

 

2/demarre en mode sans echec http://www.sosordi.net/Faq/Faq.2.html

 

3/

demarrer/panneau de configuration/ajouts et suppresions de programmes et verifie la presence de:

 

MyWaySA/mywaysearch

EmpirePoker

 

 

si ces programmes sont presents desinstallent les.

 

 

4/lance hijackthis en cliquant sur do a scan system only coche ces lignes:

 

R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll

R3 - URLSearchHook: (no name) - - (no file)

O1 - Hosts: 87.252.2.206 l2authd.lineage2.com

O1 - Hosts: 87.252.2.206 l2testauthd.lineage2.com

O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll

O2 - BHO: (no name) - {CA356D79-679B-4b4c-8E49-5AF97014F4C1} - (no file)

O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w

O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)

O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)

 

Ferme toutes les fenêtres ouvertes sauf Hijackthis et clique sur fix checked

 

 

5/pour supprimer les fichiers nefastes on va tous les afficher en faisant comme ceci:

 

Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :

Cocher la case : Afficher les fichiers et dossiers cachés

Décocher la case : Masquer les extensions des fichiers dont le type est connu

Décocher la case : Masquer les fichiers protégés du système d'exploitation

cliquer sur "Appliquer"

cliquer sur le bouton "Appliquer à tous les dossiers" / OK

 

6/supprime ce qui est en gras:

 

C:\Program Files\ MyWaySA<== tout le dossier

C:\Program Files\ EmpirePoker<== tout le dossier

C:\WINDOWS\system\ smss.exe<== le fichier ATTENTION! ne supprime pas

celui qui est dans le system32

 

7/ Du mode Sans Échec, lance Ewido et clique sur le bouton Scanner (de la barre d'outils) et ensuite clique sur Complete System Scan. Le scan prendra un certain temps, donc sois patient.

 

Ewido affichera une liste des fichiers détectés, sur la gauche. En fin de scan, l'outil appliquera les "Actions" à appliquer automatiquement. Clique sur le bouton Apply all actions. Ewido affichera "All actions have been applied" du côté droit.

 

Clique sur "Save Report", puis "Save Report As". Ceci génère un rapport en fichier texte. Assure-toi de le sauvegarder dans un endroit sûr (sur ton Bureau, par exemple).

 

 

8/redemarre en mode normal

 

9/poste le rapport d'ewido ainsi qu'un nouveau log hijackthis.

 

bon courage, et si tu as la moindre question n'hesite surtout pas :P

 

@+

zergova Member

zergova

Posté(e)
  • Auteur
Posté(e)

re et merci

Si durant la procedure ci bas, il y a des etapes que tu n'as pas reussi a faire, merci de

continuer la procedure jusqu'au bout et de les signaler dans ta prochaine reponse.

nan c'est bon j'ai tout fait

a/ Si tu as modifié ton fichier host volontairement, tu ne fixeras pas les deux lignes 01

:P c bien volontaire :P

b/ Dans la procedure je te fais enlever ton jeu de poker (risque d'infection) si tu ne veux pas

l'enlever libre a toi.

oki doki je m'en suis jamais servi de toute façon

 

 

Et voici le rapport d'Antivir

AntiVir PersonalEdition Classic

Report file date: lundi 17 juillet 2006 21:15

 

Scanning for 397237 virus strains and unwanted programs.

 

Licensed to: AntiVir PersonalEdition Classic

Serial number: 0000149996-WURGE-0001

Platform: Windows XP

Windows version: (Service Pack 2) [5.1.2600]

Username: Name

Computer name: Name

 

Version informations:

AVSCAN.EXE : 7.0.0.42 557096 17/07/2006 19:14:38

AVSCAN.DLL : 7.0.0.42 53288 17/07/2006 19:14:38

LUKE.DLL : 7.0.0.42 118824 17/07/2006 19:14:39

LUKERES.DLL : 7.0.0.42 25640 17/07/2006 19:14:39

ANTIVIR0.VDF : 6.35.0.1 7371264 17/07/2006 19:14:37

ANTIVIR1.VDF : 6.35.0.4 2048 17/07/2006 19:14:37

ANTIVIR2.VDF : 6.35.0.5 2048 17/07/2006 19:14:37

ANTIVIR3.VDF : 6.35.0.6 2048 17/07/2006 19:14:37

AVEWIN32.DLL : 7.1.0.10 1511936 17/07/2006 19:14:38

AVPREF.DLL : 7.0.0.1 49192 17/07/2006 19:14:38

AVREP.DLL : 6.35.0.1 643112 17/07/2006 19:14:38

AVRPBASE.DLL : 7.0.0.0 2162728 17/07/2006 19:14:38

AVPACK32.DLL : 7.1.0.1 335912 17/07/2006 19:14:38

AVREG.DLL : 6.31.0.90 27688 17/07/2006 19:14:38

NETNT.DLL : 6.32.0.0 6696 17/07/2006 19:14:39

NETNW.DLL : 6.32.0.0 9768 17/07/2006 19:14:39

RCIMAGE.DLL : 7.0.0.71 1642536 17/07/2006 19:14:42

RCTEXT.DLL : 7.0.0.75 77864 17/07/2006 19:14:42

 

Configuration settings for the scan:

Jobname: '%s'.................: Local Drives

Configuration file............: C:\Program Files\AntiVir PersonalEdition Classic\alldrives.avp

Boot sectors..................: C,A,D,E,F

Scan memory...................: 1

Process scan..................: 1

Scan all files................: 2

Scan archives.................: 1

Recursion depth...............: 20

Smart extensions..............: 1

Macro heuristic...............: 1

File heuristic................: -1

Primary action................: 1

Secondary action..............: 0

 

Start of the scan: lundi 17 juillet 2006 21:15

 

 

The scan over running processes will be started

17 Processes was scanned

 

Start scanning boot sectors:

 

Boot sector 'C:\'

[NOTE] No virus was found!

Boot sector 'A:\'

[NOTE] In the drive 'A:\' no data medium is inserted!

 

Starting to scan the registry.

The registry was scanned ( 15 files ).

 

 

Starting the file scan:

 

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService\NTUSER.DAT

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService\ntuser.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\Name\NTUSER.DAT

[WARNING] The file could not be opened!

C:\Documents and Settings\Name\ntuser.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\Name\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat

[WARNING] The file could not be opened!

C:\Documents and Settings\Name\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\Name\Local Settings\Temp\97exssd32d.exe

[DETECTION] Is the Trojan horse TR/Ddr.MedBot.B.2

[iNFO] A backup was created as '4520e76e.qua' ( QUARANTINE )

[iNFO] The file was deleted!

C:\WINDOWS\system32\config\DEFAULT

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\default.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SAM

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SAM.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SECURITY

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SECURITY.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SOFTWARE

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\software.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SYSTEM

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\system.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\drivers\dtscsi.sys

[WARNING] The file could not be opened!

C:\WINDOWS\system32\drivers\sptd.sys

[WARNING] The file could not be opened!

C:\WINDOWS\system32\drivers\sptd1741.sys

[WARNING] The file could not be opened!

The path A:\ could not be found!

Le périphérique n'est pas prêt.

 

The path D:\ could not be found!

Le périphérique n'est pas prêt.

 

The path E:\ could not be found!

La structure du disque est endommagée et illisible.

 

 

 

End of the scan: lundi 17 juillet 2006 22:42

Used time: 1:26:49 min

 

The scan has been done completely.

 

6487 Scanning directories

267208 Files were scanned

1 viruses and/or unwanted programs was found

1 files were deleted

0 files were repaired

1 files were moved to quarantine

0 files were renamed

9457 Archives were scanned

22 Warnings

2 Notes

zergova Member

zergova

Posté(e)
  • Auteur
Posté(e) (modifié)

encore un petit probleme

Lance Ewido et clique sur le bouton Update (barre d'outils - au haut). Sous Manual Update clique Start update.

Quand je le lance le chargement ne se lance et audessus il s'écrit

no update was available
et donc pas de
Update successful
qui apparait

Tu verras ceci juste au bas, lorsque la mise à jour sera complétée : "Update successful"

et jai pas encore fini ta deuxieme etape je me suis levé très tard :P désolé

Modifié par zergova
zergova Member

zergova

Posté(e)
  • Auteur
Posté(e) (modifié)

javai oublier une ligne :P qu'est ce que je fais pour ca?

Lance Ewido et clique sur le bouton Update (barre d'outils - au haut). Sous Manual Update clique Start update.

 

Tu verras ceci juste au bas, lorsque la mise à jour sera complétée : "Update successful"

Est-ceque c'est parceque il y a pas de mise ajours dispo?

PS: je repost pour que tu voye mon edition

Modifié par zergova
bruce lee Devil Member !

bruce lee

Posté(e)
Posté(e) (modifié)

re,

 

Mon anglais n'est pas terrible, mais apparement aucune mise n'est disponible, je pense que tu as deja les dernniere mises a jour :P

Donc, oublie les mises a jours :P

 

@+

Modifié par bruce lee
zergova Member

zergova

Posté(e)
  • Auteur
Posté(e) (modifié)

re

sa y es j'ai tout fait mais je n'ai trouvé EmpirePoker ni dans l'ajout et suppression de programme ni dans program files et apres avoir supprimé MyWaySA par l'ajout et suppression de programme je n'ai pas retrouvé de dossier dans program files

Voici donc le rapport de ewido

ewido anti-spyware - Scan Report

---------------------------------------------------------

 

+ Created at: 13:28:20 18/07/2006

 

+ Scan result:

 

 

 

HKLM\SOFTWARE\Classes\ScreensaversInstaller.Installer -> Adware.Screensavers : Cleaned with backup (quarantined).

HKLM\SOFTWARE\Classes\ScreensaversInstaller.Installer.1 -> Adware.Screensavers : Cleaned with backup (quarantined).

HKLM\SOFTWARE\Classes\ScreensaversInstaller.Installer\CLSID -> Adware.Screensavers : Cleaned with backup (quarantined).

HKLM\SOFTWARE\Classes\ScreensaversInstaller.Installer\CurVer -> Adware.Screensavers : Cleaned with backup (quarantined).

HKLM\SOFTWARE\Classes\ScreensaversInstaller.Sinstaller -> Adware.Screensavers : Cleaned with backup (quarantined).

HKLM\SOFTWARE\Classes\ScreensaversInstaller.Sinstaller.1 -> Adware.Screensavers : Cleaned with backup (quarantined).

HKLM\SOFTWARE\Classes\ScreensaversInstaller.Sinstaller\CLSID -> Adware.Screensavers : Cleaned with backup (quarantined).

HKLM\SOFTWARE\Classes\ScreensaversInstaller.Sinstaller\CurVer -> Adware.Screensavers : Cleaned with backup (quarantined).

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ScreensaversInstaller -> Adware.Screensavers : Cleaned with backup (quarantined).

C:\Program Files\Alcohol Soft\Alcohol 120% Toolbar\a120_tb.dll -> Adware.Softomate : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\BrowserSearch -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\BrowserSearch\BrowserSearch.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\BrowserSearch\BrowserSearch.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ErrorSearch -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Games -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Games\GamesOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Games\GamesOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Layouts -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Layouts\PreferencesLayout.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Layouts\PreferencesLayout.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Layouts\ToolbarLayout.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Layouts\ToolbarLayout.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Manager -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Manager\ManagerOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Manager\ManagerOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Movies -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Movies\MoviesOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Movies\MoviesOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\PopupBlocker -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\PopupBlocker\PopupBlockerOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\PopupBlocker\PopupBlockerOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Reference -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Reference\ReferenceOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Reference\ReferenceOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\RelatedSearch -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\RelatedSearch\RelatedSearchOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\RelatedSearch\RelatedSearchOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Screensavers -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ScreensaversMarketingSitePager -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Screensavers\ScreensaversOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Screensavers\ScreensaversOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\SearchAssistPlus -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\SearchAssistPlus\SearchAssistPlusOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\SearchAssistPlus\SearchAssistPlusOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\SearchMatch -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\SearchMatch\SearchMatchOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\SearchMatch\SearchMatchOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Toolbar -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ToolbarLogo -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ToolbarSearch -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Toolbar\TBProductsOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\Toolbar\TBProductsOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\TravelSearch -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\TravelSearch\TravelSearchOptions.xml -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Application Data\Starware\TravelSearch\TravelSearchOptions.xml.backup -> Adware.Starware : Cleaned with backup (quarantined).

HKU\S-1-5-21-3734463037-3667169737-228604067-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA356D79-679B-4B4C-8E49-5AF97014F4C1} -> Adware.Starware : Cleaned with backup (quarantined).

HKU\S-1-5-21-3734463037-3667169737-228604067-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D49E9D35-254C-4C6A-9D17-95018D228FF5} -> Adware.Starware : Cleaned with backup (quarantined).

C:\Documents and Settings\Mathieu\Local Settings\Temporary Internet Files\Content.IE5\F75EUCK9\WinFixer2005ScannerInstallFRA[1].exe -> Not-A-Virus.Downloader.Win32.WinFixer.b : Ignored.

:mozilla.8:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.

:mozilla.9:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@247realmedia[1].txt -> TrackingCookie.247realmedia : Cleaned.

:mozilla.10:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.129:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.13:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.15:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.16:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.17:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.239:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.

:mozilla.428:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Adition : Cleaned.

:mozilla.429:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Adition : Cleaned.

:mozilla.407:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.

:mozilla.408:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.

:mozilla.409:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@z1.adserver[1].txt -> TrackingCookie.Adserver : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@z1.adserver[1].txt -> TrackingCookie.Adserver : Cleaned.

:mozilla.43:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.

:mozilla.44:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.

:mozilla.11:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.

:mozilla.59:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.

:mozilla.40:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.

:mozilla.77:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned.

:mozilla.581:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned.

:mozilla.81:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned.

:mozilla.82:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned.

:mozilla.83:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned.

:mozilla.84:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@com[1].txt -> TrackingCookie.Com : Cleaned.

:mozilla.490:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.

:mozilla.491:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.

:mozilla.492:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Cleaned.

:mozilla.419:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned.

:mozilla.7:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.

:mozilla.117:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Estat : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@estat[1].txt -> TrackingCookie.Estat : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@estat[1].txt -> TrackingCookie.Estat : Cleaned.

:mozilla.31:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.

:mozilla.53:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.

:mozilla.54:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.

:mozilla.55:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.

:mozilla.56:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.

:mozilla.57:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.

:mozilla.25:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.26:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.27:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.28:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.29:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.30:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.31:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.32:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.33:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.62:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.82:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.86:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.87:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.88:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@as-eu.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@as1.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.

:mozilla.128:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Findwhat : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@findwhat[1].txt -> TrackingCookie.Findwhat : Cleaned.

:mozilla.473:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Goclick : Cleaned.

:mozilla.474:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Goclick : Cleaned.

:mozilla.51:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@ehg-ads.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.

:mozilla.192:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Internetfuel : Cleaned.

:mozilla.193:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Internetfuel : Cleaned.

:mozilla.194:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Internetfuel : Cleaned.

:mozilla.195:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Internetfuel : Cleaned.

:mozilla.196:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Internetfuel : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@internetfuel[1].txt -> TrackingCookie.Internetfuel : Cleaned.

:mozilla.197:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@komtrack[1].txt -> TrackingCookie.Komtrack : Cleaned.

:mozilla.523:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.

:mozilla.524:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.

:mozilla.525:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.

:mozilla.503:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.

:mozilla.58:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.

:mozilla.78:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.

:mozilla.528:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.

:mozilla.529:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.

:mozilla.530:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.

:mozilla.531:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@stat.onestat[2].txt -> TrackingCookie.Onestat : Cleaned.

:mozilla.255:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Overture : Cleaned.

:mozilla.256:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Overture : Cleaned.

:mozilla.269:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Overture : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@data2.perf.overture[2].txt -> TrackingCookie.Overture : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@overture[1].txt -> TrackingCookie.Overture : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@perf.overture[1].txt -> TrackingCookie.Overture : Cleaned.

:mozilla.39:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.

:mozilla.40:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.

:mozilla.41:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.

:mozilla.42:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Cleaned.

:mozilla.274:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.

:mozilla.65:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.

:mozilla.572:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Realtracker : Cleaned.

:mozilla.533:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.

:mozilla.534:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.

:mozilla.535:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.

:mozilla.536:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.

:mozilla.537:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.

:mozilla.538:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.

:mozilla.539:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.

:mozilla.540:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@revenue[2].txt -> TrackingCookie.Revenue : Cleaned.

:mozilla.99:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.

:mozilla.292:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.293:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.294:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.295:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.

:mozilla.469:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.

:mozilla.18:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.19:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.20:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.387:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.388:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.389:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.629:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@smartadserver[1].txt -> TrackingCookie.Smartadserver : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Cleaned.

:mozilla.305:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.

:mozilla.308:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.

:mozilla.309:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.

:mozilla.310:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.

:mozilla.311:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.

:mozilla.324:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.325:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.326:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.327:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.328:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.329:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.330:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.331:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.332:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.333:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.334:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.

:mozilla.335:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.

:mozilla.336:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned.

:mozilla.338:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.

:mozilla.360:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.361:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.362:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.38:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@weborama[2].txt -> TrackingCookie.Weborama : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@weborama[2].txt -> TrackingCookie.Weborama : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@wreport.weborama[1].txt -> TrackingCookie.Weborama : Cleaned.

:mozilla.398:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.

:mozilla.399:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.

:mozilla.47:C:\Documents and Settings\Mathieu\Application Data\Mozilla\Firefox\Profiles\pxq97sn1.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.

:mozilla.21:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

:mozilla.22:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

:mozilla.23:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

:mozilla.24:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

:mozilla.25:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

:mozilla.26:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

:mozilla.27:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

:mozilla.434:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

:mozilla.435:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.

C:\Documents and Settings\Mathieu\Cookies\mathieu@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.

:mozilla.411:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.

:mozilla.412:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.

:mozilla.413:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.

:mozilla.414:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.

:mozilla.415:C:\Documents and Settings\Timothée BERTIN\Application Data\Mozilla\Firefox\Profiles\w5qr4jr1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.

C:\Documents and Settings\Timothée BERTIN\Cookies\timothée bertin@zedo[1].txt -> TrackingCookie.Zedo : Cleaned.

 

 

::Report end

 

et celui de hijackthis

Logfile of HijackThis v1.99.1

Scan saved at 14:02:58, on 18/07/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\LEXPPS.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\CTsvcCDA.EXE

C:\Program Files\ewido anti-spyware 4.0\guard.exe

C:\WINDOWS\System32\snmp.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\UAService7.exe

C:\WINDOWS\wlancfg.exe

C:\WINDOWS\system32\MsPMSPSv.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\Rundll32.exe

C:\WINDOWS\system32\dla\tfswctrl.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\MessengerPlus! 3\MsgPlus.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\ewido anti-spyware 4.0\ewido.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\HijackThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.fr/myway

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.fr/myway

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.fr/myway

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll

O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll

O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

O4 - HKLM\..\Run: [ssdiag] C:\WINDOWS\ssdiag.exe

O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O8 - Extra context menu item: Save Flash by &GetFlash - C:\PROGRA~1\GetFlash\getflash.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O18 - Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Program Files\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE

O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\WINDOWS\wlancfg.exe

 

Modifié par zergova

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...