Re-Bonjour,
J'ai effectué un scan en ligne avec Kaspersky qui n'a rien détecté d'anormal
Voila le rapport Ewido suivi d'un rapport Hijackthis
Mon systeme semble nettoyé mais je souhaiterais confirmation svp
Merci encore pour l'aide :)
---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------
+ Created at: 14:37:59 29/09/2006
+ Scan result:
:mozilla.14:C:\Documents and Settings\Alexandre\Application Data\Mozilla\Firefox\Profiles\rybir67n.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.15:C:\Documents and Settings\Alexandre\Application Data\Mozilla\Firefox\Profiles\rybir67n.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.16:C:\Documents and Settings\Alexandre\Application Data\Mozilla\Firefox\Profiles\rybir67n.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.40:C:\Documents and Settings\Alexandre\Application Data\Mozilla\Firefox\Profiles\rybir67n.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.41:C:\Documents and Settings\Alexandre\Application Data\Mozilla\Firefox\Profiles\rybir67n.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.6:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.7:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.30:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.31:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.32:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.15:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.31:C:\Documents and Settings\Alexandre\Application Data\Mozilla\Firefox\Profiles\rybir67n.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.14:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.33:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
:mozilla.18:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.19:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.20:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.26:C:\Documents and Settings\Alexandre\Application Data\Mozilla\Firefox\Profiles\rybir67n.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.27:C:\Documents and Settings\Alexandre\Application Data\Mozilla\Firefox\Profiles\rybir67n.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.28:C:\Documents and Settings\Alexandre\Application Data\Mozilla\Firefox\Profiles\rybir67n.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.29:C:\Documents and Settings\Raymond\Application Data\Mozilla\Firefox\Profiles\jbflmfdu.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
::Report end
Logfile of HijackThis v1.99.1
Scan saved at 14:46:40, on 29/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Logiciels\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\Logiciels\Alwil Software\Avast4\aswUpdSv.exe
C:\Logiciels\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe
C:\LOGICI~1\ALWILS~1\Avast4\ashDisp.exe
C:\Logiciels\Acronis\TrueImage\TrueImageMonitor.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
C:\Logiciels\Alwil Software\Avast4\ashMaiSv.exe
C:\Logiciels\Alwil Software\Avast4\ashWebSv.exe
C:\Logiciels\ewido anti-spyware 4.0\guard.exe
C:\Logiciels\ewido anti-spyware 4.0\ewido.exe
C:\Logiciels\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\LOGICI~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe
O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe"
O4 - HKLM\..\Run: [SmcService] C:\LOGICI~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [avast!] C:\LOGICI~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Logiciels\Acronis\TrueImage\TrueImageMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [!ewido] "C:\Logiciels\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Logiciels\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Logiciels\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Logiciels\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Logiciels\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Logiciels\ewido anti-spyware 4.0\guard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Logiciels\Sygate\SPF\smc.exe