Pb de connexion - mon rapport Hijack thisFermé

Question

Bonjour à tous!Je vous joins mon rapport hijack this, car j'ai un probleme sur mon pc.Déja, il a ralenti depuis quelque temps, ensuite j'ai un probleme de connection : tout marche nickel pendant 10 minutes environs, puis la connexion se gele, et quand je clique sur mon icone de connexion, la fenetre s'ouvre et disparait de suite. Impossible de couper ma connexion pour essayer de la remettre.Avec le rapport peut etre pourriez vous m'aider : Logfile of HijackThis v1.99.1Scan saved at 12:07:25, on 21/08/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Sygate\SPF\smc.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\SOUNDMAN.EXED:\Programme\HP\HP Software Update\HPWuSchd.exeC:\Program Files\HP\hpcoretech\hpcmpmgr.exeC:\WINDOWS\system32\GSICON.EXEC:\WINDOWS\system32\dslagent.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeD:\Programme\Daemon tools\daemon.exeC:\Program Files\AntiVir PersonalEdition Classic\avgnt.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\SyncroSoft\Pos\H2O\cledx.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\lclock.exeC:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXEC:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeD:\Programme\HP\Digital Imaging\bin\hpqtra08.exeC:\Program Files\AntiVir PersonalEdition Classic\sched.exeC:\Program Files\AntiVir PersonalEdition Classic\avguard.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\WINDOWS\system32
vsvc32.exeC:\WINDOWS\system32\svchost.exeD:\Programme\Mozilla Fr\mozilla.exeC:\Program Files\Java\j2re1.4.2_05\bin\java.exeD:\Programme\Winamp\winamp.exeD:\Mes Documents\Utilitaires\hijackthis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=sslR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.free.fr/freebox/index.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%sR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.0.1:80R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [HP Software Update] "D:\Programme\HP\HP Software Update\HPWuSchd.exe"O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exeO4 - HKLM\..\Run: [GSICONEXE] GSICON.EXEO4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USBO4 - HKLM\..\Run: [pccguide.exe] "D:\Programme\PC-Cillin9\pccguide.exe"O4 - HKLM\..\Run: [PCCClient.exe] "D:\Programme\PC-Cillin9\PCCClient.exe"O4 - HKLM\..\Run: [Pop3trap.exe] "D:\Programme\PC-Cillin9\Pop3trap.exe"O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exeO4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Programme\Daemon tools\daemon.exe"  -lang 1033O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [key2] C:\WINDOWS\system32\winlog.exeO4 - HKLM\..\Run: [anti_troj] C:\WINDOWS\system32\anti_troj.exeO4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /minO4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startguiO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [LClock] lclock.exeO4 - HKCU\..\Run: [key2] C:\WINDOWS\system32\winlog.exeO4 - HKCU\..\Run: [anti_troj] C:\WINDOWS\system32\anti_troj.exeO4 - HKCU\..\Run: [EPSON Stylus COLOR 480SXU] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE /P25 "EPSON Stylus COLOR 480SXU" /O6 "USB002" /M "Stylus COLOR 480SXU"O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeO4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Programme\HP\Digital Imaging\bin\hpqtra08.exeO4 - Global Startup: Microsoft Office.lnk = D:\Programme\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Programme\aim\aim.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO14 - IERESET.INF: START_PAGE_URL=https://www.free.fr/freebox/index.htmlO15 - Trusted Zone: http://ny.contentmatch.net (HKLM)O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.htmlO23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exeO23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exeO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exeO23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exej'utilise antivir comme antivirus.Merci d'avance.  ;-)Ard

Utilisateur anonyme · Answer

Salut,il y a un probléme tu as PC-Cillin9, Sygate et antivir, il ne faut qu'un anti-virus et un pare-feu ! fait le ménage!Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [HP Software Update] "D:\Programme\HP\HP Software Update\HPWuSchd.exe"O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Programme\Daemon tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [key2] C:\WINDOWS\system32\winlog.exe O4 - HKLM\..\Run: [anti_troj] C:\WINDOWS\system32\anti_troj.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [key2] C:\WINDOWS\system32\winlog.exe O4 - HKCU\..\Run: [anti_troj] C:\WINDOWS\system32\anti_troj.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.htmlClic sur demarrer, rechercher, cherche et supprime si présent :anti_troj.exewinlog.exe*Si un fichier persiste lors de la suppression fais ceci:-Redemarres ton pc, dès l'allumage de celui-ci tapote la touche f8, à l'écran qui va apparaitre choisis "mode sans echec" attends un peu.. puis vas supprimer les fichiers/dossiers qui persistaient, vides ta corbeille et redemarres normalementTelecharge, installe puis mets à jour ce logiciel(Ewido), une fois que c'est fait, fais un scan complet de ton système et colle le rapport ici avec un nouveau rapport hijackthisEwido: (installe le en anglais il passera en français, reste gratuit après la période d'essai)Télécharger Ewido Security SuiteA++

ard123 · Answer

Salut Boulepate62!merci pour ta réponse.J'ai antivir comme anti virus, et sygate comme firewall.Pc-cillin, je l'ai désinstallé, c'est ce que j'utilisais avant comme antivirus et firewall.J'ai fais ce que tu m'as dit concernant le rapport de "hijack this".Par contre je n'ai pas réussi à localiser les fichiers anti_troj.exe et winlog.exe  Introuvable!!!! j'ai fait une recherche dans mes deux partitions de mon disque, j'ai essayé aussi en mode sans echec, sans résultat...J'ai installé ewido, voici le rapport : ---------------------------------------------------------ewido anti-spyware - Scan Report--------------------------------------------------------- + Created at:	17:01:40 22/08/2006 + Scan result:	:mozilla.61:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.247realmedia : No action taken.:mozilla.62:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.247realmedia : No action taken.:mozilla.63:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.247realmedia : No action taken.:mozilla.488:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.2o7 : No action taken.:mozilla.489:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.2o7 : No action taken.:mozilla.524:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.2o7 : No action taken.:mozilla.666:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.2o7 : No action taken.:mozilla.705:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Adocean : No action taken.:mozilla.706:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Adocean : No action taken.:mozilla.712:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Adocean : No action taken.:mozilla.713:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Adocean : No action taken.:mozilla.714:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Adocean : No action taken.:mozilla.715:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Adocean : No action taken.:mozilla.100:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Adtech : No action taken.:mozilla.99:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Adtech : No action taken.:mozilla.196:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Advertising : No action taken.:mozilla.197:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Advertising : No action taken.:mozilla.198:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Advertising : No action taken.:mozilla.199:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Advertising : No action taken.:mozilla.482:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Atdmt : No action taken.:mozilla.487:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Bluestreak : No action taken.:mozilla.76:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Bluestreak : No action taken.:mozilla.707:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Casalemedia : No action taken.:mozilla.321:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Comclick : No action taken.:mozilla.322:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Comclick : No action taken.:mozilla.323:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Comclick : No action taken.:mozilla.75:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Doubleclick : No action taken.:mozilla.77:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Estat : No action taken.:mozilla.78:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Falkag : No action taken.:mozilla.79:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Falkag : No action taken.:mozilla.80:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Falkag : No action taken.:mozilla.123:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Googleadservices : No action taken.:mozilla.278:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Googleadservices : No action taken.:mozilla.285:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Googleadservices : No action taken.:mozilla.336:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Googleadservices : No action taken.:mozilla.361:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Googleadservices : No action taken.:mozilla.362:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Googleadservices : No action taken.:mozilla.492:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Googleadservices : No action taken.:mozilla.518:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Googleadservices : No action taken.:mozilla.692:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Googleadservices : No action taken.:mozilla.724:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Googleadservices : No action taken.:mozilla.669:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Hitbox : No action taken.:mozilla.670:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Hitbox : No action taken.:mozilla.64:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Mediaplex : No action taken.:mozilla.594:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Myaffiliateprogram : No action taken.:mozilla.121:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Overture : No action taken.:mozilla.122:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Overture : No action taken.:mozilla.771:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Paycounter : No action taken.:mozilla.767:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Sexcounter : No action taken.:mozilla.768:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Sexcounter : No action taken.:mozilla.769:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Sexcounter : No action taken.:mozilla.770:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Sexcounter : No action taken.:mozilla.226:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Sitestat : No action taken.:mozilla.10:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Smartadserver : No action taken.:mozilla.7:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Smartadserver : No action taken.:mozilla.8:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Smartadserver : No action taken.:mozilla.9:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Smartadserver : No action taken.:mozilla.102:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.:mozilla.103:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.:mozilla.104:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.:mozilla.106:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.:mozilla.324:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Valueclick : No action taken.:mozilla.325:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Valueclick : No action taken.:mozilla.71:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Weborama : No action taken.:mozilla.72:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Weborama : No action taken.:mozilla.73:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Weborama : No action taken.:mozilla.130:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Webtrendslive : No action taken.:mozilla.786:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Yadro : No action taken.:mozilla.787:C:\Documents and Settings\NCL.LSDBOT-III.000\Application Data\Mozilla\Profiles\default\22erz00q.slt\cookies.txt -> TrackingCookie.Yadro : No action taken.::Report endVoila le rapport.A+ et merci

ard123 · Answer

bon voila, j'ai fait ce que tu m'a demandé.Voici le rapport de bitfender : BitDefender Online Scanner	 	 Scan report generated at: Wed, Aug 23, 2006 - 11:40:40 	 	 Scan path: C:\;	 	  	 	 StatisticsTime	00:25:41Files	153645Folders	3842Boot Sectors	3Archives	1824Packed Files	8381	 	 ResultsIdentified Viruses	4Infected Files	13Suspect Files	3Warnings	0Disinfected	0Deleted Files	16	 	 Engines InfoVirus Definitions	450309Engine build	AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)Scan plugins	13Archive plugins	39Unpack plugins	5E-mail plugins	6System plugins	1	 	 Scan SettingsFirst Action	DisinfectSecond Action	DeleteHeuristics	YesEnable Warnings	YesScanned Extensions	*;Exclude Extensions	 Scan Emails	YesScan Archives	YesScan Packed	YesScan Files	YesScan Boot	Yes	 	  Scanned File	 StatusC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 136)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 16:55:15 +0200]=>(MIME part)=>(MIME part)=>(message body)	Suspected of: Exploit.Iframe.VulnerabilityC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 136)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 16:55:15 +0200]=>(MIME part)=>(MIME part)=>(message body)	Disinfection failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 136)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 16:55:15 +0200]=>(MIME part)=>(MIME part)=>(message body)	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 136)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 16:55:15 +0200]=>(MIME part)=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 136)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 16:55:15 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 136)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 136)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 16:55:15 +0200]=>(MIME part)=>message.scr	Infected with: Win32.Netsky.P@mmC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 136)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 16:55:15 +0200]=>(MIME part)=>message.scr	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 136)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 16:55:15 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 136)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx	Update failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 137)=>[Subject: hi][Date: Thu, 7 Apr 2005 16:55:31 +0200]=>(MIME part)=>game_xxo.zip=>data.rtf .scr	Infected with: Win32.Netsky.P@mmC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 137)=>[Subject: hi][Date: Thu, 7 Apr 2005 16:55:31 +0200]=>(MIME part)=>game_xxo.zip=>data.rtf .scr	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 137)=>[Subject: hi][Date: Thu, 7 Apr 2005 16:55:31 +0200]=>(MIME part)=>game_xxo.zip	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 137)=>[Subject: hi][Date: Thu, 7 Apr 2005 16:55:31 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 137)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx	Update failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 149)=>[Subject: Re: Word file][Date: Thu, 7 Apr 2005 16:03:53 +0200]=>(MIME part)=>document_word.pif	Infected with: Win32.Netsky.D@mmC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 149)=>[Subject: Re: Word file][Date: Thu, 7 Apr 2005 16:03:53 +0200]=>(MIME part)=>document_word.pif	Disinfection failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 149)=>[Subject: Re: Word file][Date: Thu, 7 Apr 2005 16:03:53 +0200]=>(MIME part)=>document_word.pif	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 149)=>[Subject: Re: Word file][Date: Thu, 7 Apr 2005 16:03:53 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 149)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx	Update failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 151)=>[Subject: Re: Hi][Date: Thu, 7 Apr 2005 14:46:40 +0200]=>(MIME part)=>your_file.pif	Infected with: Win32.Netsky.D@mmC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 151)=>[Subject: Re: Hi][Date: Thu, 7 Apr 2005 14:46:40 +0200]=>(MIME part)=>your_file.pif	Disinfection failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 151)=>[Subject: Re: Hi][Date: Thu, 7 Apr 2005 14:46:40 +0200]=>(MIME part)=>your_file.pif	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 151)=>[Subject: Re: Hi][Date: Thu, 7 Apr 2005 14:46:40 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 151)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx	Update failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 169)=>[Subject: Re: Re: Re: Your document][Date: Thu, 7 Apr 2005 09:06:04 +0200]=>(MIME part)=>document_4351.pif	Infected with: Win32.Netsky.D@mmC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 169)=>[Subject: Re: Re: Re: Your document][Date: Thu, 7 Apr 2005 09:06:04 +0200]=>(MIME part)=>document_4351.pif	Disinfection failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 169)=>[Subject: Re: Re: Re: Your document][Date: Thu, 7 Apr 2005 09:06:04 +0200]=>(MIME part)=>document_4351.pif	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 169)=>[Subject: Re: Re: Re: Your document][Date: Thu, 7 Apr 2005 09:06:04 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 169)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx	Update failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 170)=>[Subject: Notice again][Date: Thu, 7 Apr 2005 10:07:43 +0200]=>(MIME part)=>abuses_ncl.zip=>details.txt .pif	Infected with: Win32.Netsky.P@mmC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 170)=>[Subject: Notice again][Date: Thu, 7 Apr 2005 10:07:43 +0200]=>(MIME part)=>abuses_ncl.zip=>details.txt .pif	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 170)=>[Subject: Notice again][Date: Thu, 7 Apr 2005 10:07:43 +0200]=>(MIME part)=>abuses_ncl.zip	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 170)=>[Subject: Notice again][Date: Thu, 7 Apr 2005 10:07:43 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 170)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx	Update failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 171)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 10:08:00 +0200]=>(MIME part)=>(MIME part)=>(message body)	Suspected of: Exploit.Iframe.VulnerabilityC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 171)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 10:08:00 +0200]=>(MIME part)=>(MIME part)=>(message body)	Disinfection failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 171)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 10:08:00 +0200]=>(MIME part)=>(MIME part)=>(message body)	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 171)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 10:08:00 +0200]=>(MIME part)=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 171)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 10:08:00 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 171)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 171)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 10:08:00 +0200]=>(MIME part)=>message.scr	Infected with: Win32.Netsky.P@mmC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 171)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 10:08:00 +0200]=>(MIME part)=>message.scr	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 171)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Thu, 7 Apr 2005 10:08:00 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 171)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx	Update failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 178)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Wed, 6 Apr 2005 10:21:34 +0200]=>(MIME part)=>(MIME part)=>(message body)	Suspected of: Exploit.Iframe.VulnerabilityC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 178)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Wed, 6 Apr 2005 10:21:34 +0200]=>(MIME part)=>(MIME part)=>(message body)	Disinfection failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 178)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Wed, 6 Apr 2005 10:21:34 +0200]=>(MIME part)=>(MIME part)=>(message body)	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 178)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Wed, 6 Apr 2005 10:21:34 +0200]=>(MIME part)=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 178)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Wed, 6 Apr 2005 10:21:34 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 178)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 178)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Wed, 6 Apr 2005 10:21:34 +0200]=>(MIME part)=>message.scr	Infected with: Win32.Netsky.P@mmC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 178)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Wed, 6 Apr 2005 10:21:34 +0200]=>(MIME part)=>message.scr	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 178)=>[Subject: Mail Delivery (failure ncl@libertysurf][Date: Wed, 6 Apr 2005 10:21:34 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 178)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx	Update failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 179)=>[Subject: Re: Your document][Date: Wed, 6 Apr 2005 10:23:40 +0200]=>(MIME part)=>your_document.doc.pif	Infected with: Win32.Netsky.P@mmC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 179)=>[Subject: Re: Your document][Date: Wed, 6 Apr 2005 10:23:40 +0200]=>(MIME part)=>your_document.doc.pif	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 179)=>[Subject: Re: Your document][Date: Wed, 6 Apr 2005 10:23:40 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 179)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx	Update failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 180)=>[Subject: Re: Re: Document][Date: Wed, 6 Apr 2005 09:23:56 +0200]=>(MIME part)=>your_document.pif	Infected with: Win32.Netsky.D@mmC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 180)=>[Subject: Re: Re: Document][Date: Wed, 6 Apr 2005 09:23:56 +0200]=>(MIME part)=>your_document.pif	Disinfection failedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 180)=>[Subject: Re: Re: Document][Date: Wed, 6 Apr 2005 09:23:56 +0200]=>(MIME part)=>your_document.pif	DeletedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 180)=>[Subject: Re: Re: Document][Date: Wed, 6 Apr 2005 09:23:56 +0200]=>(MIME part)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 180)	UpdatedC:\Documents and Settings\NCL.LSDBOT-III.000\Local Settings\Application Data\Identities\{B643A13F-A2F0-4401-B79D-9F6FAEB8D40E}\Microsoft\Outlook Express\Éléments supprimés.dbx	Update failedC:\System Volume Information\_restore{3C0907F0-7857-49B7-8CC5-D96436425DE5}\RP23\A0005405.exe	Infected with: Win32.Bagz.H@mmC:\System Volume Information\_restore{3C0907F0-7857-49B7-8CC5-D96436425DE5}\RP23\A0005405.exe	DeletedC:\WINDOWS\hosts	Infected with: Generic.Qhost.04FB2A00C:\WINDOWS\hosts	Disinfection failedC:\WINDOWS\hosts	DeletedC:\WINDOWS\system32\hosts	Infected with: Generic.Qhost.04FB2A00C:\WINDOWS\system32\hosts	Disinfection failedC:\WINDOWS\system32\hosts	Deleted	  voila!merci et a+ ;-)

ard123 · Answer

ok, je continue.Merci pour ton aide  ;-)

Pb de connexion - mon rapport Hijack this

4 réponses

Discussions similaires

Newsletters