adssite_sidebar.dllRésolu/Fermé

Question

Bonjour,
chaque fois que je lance hijackthis + analyse du log, 2 fichiers sont estimés dangereux (adssite_sidebar.dll, et njs11.dll) je les enleve mais ils reviennent à chaque redemarrage. sont ils des fichiers virus ou autres ???? help please

clownface · Answer

bonsoir,

voici ce qu'il faut faire : http://www.malekal.com/adssite_gzmrotate.php
conserve les rapports (au cas ou tout ne soit pas résolu ensuite, je peux te les demander)
postes un rapport hijackthis lorsque tu as terminé

momo54 · Answer

merci pour la reponse; comme je suis novice je t'envoies le log hijackthis 


Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 19:19:08, on 10/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
D:\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
F:\papa\divers\Antidote\Gestionnaire Antidote.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\bin\iPodService.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3D08FA5E-3441-4E7F-8EBB-AD40E64E9F82} - C:\WINDOWS\system32\compatU.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ads_optimizer - {9C8A568E-4201-478a-8536-526CF371D2E2} - C:\WINDOWS\system32
sj11.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] D:\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Delete Phone Bird Five] C:\Documents and Settings\All Users\Application Data\wave boob delete phone\Ace 32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WinAble] C:\Program Files\WinAble\winable.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] F:\papa\divers\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Tray Trust] C:\DOCUME~1\BOUHMA~1\APPLIC~1\COPYBO~1\SpamLog.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{CFC7B16D-D67F-4D0D-B98D-1018BD116B71}: NameServer = 208.67.222.222 193.55.10.102
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe

clownface · Answer

relances hijackthis, 
coches ces lignes

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ads_optimizer - {9C8A568E-4201-478a-8536-526CF371D2E2} - C:\WINDOWS\system32
sj11.dll 

et fais "fix checked"

continues la manip décrite sur le lien, postes les rapports clean et avg antispy.

momo54 · Answer

pour clean dois je faire d'abord 1 ou 2 etc...(pour scanner)

momo54 · Answer

voici le nouveau log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:10:56, on 10/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
D:\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
F:\papa\divers\Antidote\Gestionnaire Antidote.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\bin\iPodService.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3D08FA5E-3441-4E7F-8EBB-AD40E64E9F82} - C:\WINDOWS\system32\compatU.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] D:\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Delete Phone Bird Five] C:\Documents and Settings\All Users\Application Data\wave boob delete phone\Ace 32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WinAble] C:\Program Files\WinAble\winable.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] F:\papa\divers\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Tray Trust] C:\DOCUME~1\BOUHMA~1\APPLIC~1\COPYBO~1\SpamLog.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{CFC7B16D-D67F-4D0D-B98D-1018BD116B71}: NameServer = 208.67.222.222 193.55.10.102
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe

clownface · Answer

c'est mieux mais pas encore vraiment ça...

télécharge msnfix : http://sosvirus.changelog.fr/MSNFix.zip
Décompresses-le (clic droit >> Extraire ici) et double-clique sur le fichier MSNFix.bat.
Exécute l'option R.
montres le rapport

momo54 · Answer

j'ai lancé en executant r mais ca n'a rien donné l'ecran est resté bleu .

momo54 · Answer

voila du nouveau j'ai lancé msnfix r, dans le resultat il signale "infection presente " puis je relance le nettoyage voici le rapport


MSNFix 1.623  
 
C:\Documents and Settings\bouhmadouche\Bureau\MSNFix 
Fix exécuté le 10/01/2008 - 23:47:40,85 By bouhmadouche 
mode normal    
    
************************ Recherche les fichiers présents      
    
Aucun Fichier trouvé 
 
************************ Recherche les dossiers présents       
 
... C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP\ 
... C:\PROGRA~1\WinAble\ 
... C:\Temp\ 
 
 
 
 
************************ Suppression des fichiers       
    
 
 
************************ Suppression des dossiers       
 
.. OK ... C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP\   
.. OK ... C:\PROGRA~1\WinAble\   
.. OK ... C:\Temp\   
 
 
************************ Nettoyage du registre 
 
 
 
************************ Fichiers suspects 
 
Aucun Fichier trouvé 
 
  
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 10012008_23560420.zip
 
 
------------------------------------------------------------------------  
Auteur : !aur3n7                     Contact: https://www.ionos.fr/     
------------------------------------------------------------------------   
 
---------------------------------------------   END   ---------------------------------------------

momo54 · Answer

et voici le rapport d'avg bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.bouhmadouche\Cookies\bouhmadouche@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@himedia.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@shopping.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Cookies\bouhmadouche@2.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Cookies\bouhmadouche@4.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Cookies\bouhmadouche@adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Cookies\bouhmadouche@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Cookies\bouhmadouche@adrevolver[3].txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Cookies\bouhmadouche@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.bouhmadouche\Cookies\bouhmadouche@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.bouhmadouche\Cookies\bouhmadouche@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.bouhmadouche\Cookies\bouhmadouche@adviva[2].txt -> TrackingCookie.Adviva : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.bouhmadouche\Cookies\bouhmadouche@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.bouhmadouche\Cookies\bouhmadouche@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Cookies\bouhmadouche@casalemedia[2].txt -> TrackingCookie.Casalemedia : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Clickbank : Nettoyé.bouhmadouche\Cookies\bouhmadouche@clickbank[1].txt -> TrackingCookie.Clickbank : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.bouhmadouche\Cookies\bouhmadouche@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Cookies\bouhmadouche@dealtime[2].txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Cookies\bouhmadouche@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.bouhmadouche\Cookies\bouhmadouche@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Enhance : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Enhance : Nettoyé.bouhmadouche\Cookies\bouhmadouche@enhance[1].txt -> TrackingCookie.Enhance : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.bouhmadouche\Cookies\bouhmadouche@estat[1].txt -> TrackingCookie.Estat : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.bouhmadouche\Cookies\bouhmadouche@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Gemius : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Gemius : Nettoyé.bouhmadouche\Cookies\bouhmadouche@hit.gemius[2].txt -> TrackingCookie.Gemius : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Goclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Goclick : Nettoyé.bouhmadouche\Cookies\bouhmadouche@goclick[2].txt -> TrackingCookie.Goclick : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Hitslink : Nettoyé.bouhmadouche\Cookies\bouhmadouche@counter.hitslink[1].txt -> TrackingCookie.Hitslink : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Hotlog : Nettoyé.bouhmadouche\Cookies\bouhmadouche@hotlog[1].txt -> TrackingCookie.Hotlog : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Information : Nettoyé.bouhmadouche\Cookies\bouhmadouche@searchportal.information[1].txt -> TrackingCookie.Information : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.bouhmadouche\Cookies\bouhmadouche@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Nettoyé.bouhmadouche\Cookies\bouhmadouche@www.lop[1].txt -> TrackingCookie.Lop : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.bouhmadouche\Cookies\bouhmadouche@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.bouhmadouche\Cookies\bouhmadouche@overture[1].txt -> TrackingCookie.Overture : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Paycounter : Nettoyé.bouhmadouche\Cookies\bouhmadouche@paycounter[1].txt -> TrackingCookie.Paycounter : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Cookies\bouhmadouche@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.bouhmadouche\Cookies\bouhmadouche@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revenue : Nettoyé.bouhmadouche\Cookies\bouhmadouche@revenue[2].txt -> TrackingCookie.Revenue : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Cookies\bouhmadouche@revsci[2].txt -> TrackingCookie.Revsci : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Ru4 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Ru4 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Ru4 : Nettoyé.bouhmadouche\Cookies\bouhmadouche@edge.ru4[1].txt -> TrackingCookie.Ru4 : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Cookies\bouhmadouche@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Cookies\bouhmadouche@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.bouhmadouche\Cookies\bouhmadouche@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Starware : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.bouhmadouche\Cookies\bouhmadouche@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.bouhmadouche\Cookies\bouhmadouche@tacoda[1].txt -> TrackingCookie.Tacoda : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.bouhmadouche\Cookies\bouhmadouche@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.bouhmadouche\Cookies\bouhmadouche@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.bouhmadouche\Cookies\bouhmadouche@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.bouhmadouche\Cookies\bouhmadouche@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yadro : Nettoyé.bouhmadouche\Cookies\bouhmadouche@yadro[1].txt -> TrackingCookie.Yadro : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Cookies\bouhmadouche@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Application Data\Mozilla\Firefox\Profiles\u4wnztrk.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Cookies\bouhmadouche@c5.zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Cookies\bouhmadouche@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.bouhmadouche\Mes documents\MSNfake.zip.part/MSNfake/MSN Messenger.exe -> Trojan.FakeMSN.a : Nettoyé et sauvegardé (mise en quarantaine).

clownface · Answer

Bonjour,

ok y avait besoin de faire du menage...
montres un rapport clean puis un nouveau hijackthis

momo54 · Answer

salut clownfaced'ange, tu veux dire msnfix

clownface · Answer

salut, 

non non, j'ia bien dit clean : http://www.malekal.com/download/clean.zip
décompresse-le sur le bureau (clic droit / extraire tout), 
Ouvre le dossier clean qui se trouve sur ton bureau, 
et double-clique sur clean.cmd, une fenêtre noire s'affiche, choisis l'option 2 et laisses toi guider.
postes le rapport.

j'dois partir mais j'repasse demain a+

momo54 · Answer

re face d'ange
ci joint rapport hijackthis
mais il ya tjrs un fichier qui doit etre infecté systeme32\compatu.dll (avec trojan.bho.agz) avg le reconnait il le met en 40aine mais il est à chaque fois relancé.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:45:46, on 11/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
D:\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
F:\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
F:\papa\divers\Antidote\Gestionnaire Antidote.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
f:\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
D:\bin\iPodService.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32
tos.exe,
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3D08FA5E-3441-4E7F-8EBB-AD40E64E9F82} - C:\WINDOWS\system32\compatU.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: e404 helper - {F10587E9-0E47-4CBE-84AE-7DD20B8684BB} - C:\Program Files\Helper\superfindout.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] D:\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Delete Phone Bird Five] C:\Documents and Settings\All Users\Application Data\wave boob delete phone\Ace 32.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] F:\papa\divers\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Tray Trust] C:\DOCUME~1\BOUHMA~1\APPLIC~1\COPYBO~1\SpamLog.exe
O4 - HKCU\..\Run: [userinit] C:\WINDOWS\system32
tos.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{CFC7B16D-D67F-4D0D-B98D-1018BD116B71}: NameServer = 208.67.222.222 193.55.10.102
O20 - AppInit_DLLs: C:\WINDOWS\system32\syst1.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - f:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe

clownface · Answer

Bonjour,

compte tenu de ton rapport, je te conseille vivement de faire ceci : http://forum.malekal.com/ftopic4192.php
suis le tuto pour le paramétrage, fais un scan et poste le rapport.

momo54 · Answer

salut face d'ange;
voci le rapport de antivir(tu jetera un regard stp sur le fichier systeme32\compatu.dll qu'il ne peut pas enlever; il y est dans le rapport


AntiVir PersonalEdition Classic
Report file date: dimanche 13 janvier 2008  21:10

Scanning for 1027920 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Username:         Administrateur
Computer name:    FN-7E4DFAA8C9C9

Version information:
BUILD.DAT    : 270           15603 Bytes  19/09/2007 13:32:00
AVSCAN.EXE   : 7.0.6.1      290856 Bytes  23/08/2007 13:16:29
AVSCAN.DLL   : 7.0.6.0       49192 Bytes  16/08/2007 12:23:51
LUKE.DLL     : 7.0.5.3      147496 Bytes  14/08/2007 15:32:47
LUKERES.DLL  : 7.0.6.1       10280 Bytes  21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0    11030528 Bytes  18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.1.95    3367424 Bytes  14/12/2007 19:59:18
ANTIVIR2.VDF : 7.0.1.205    620544 Bytes  08/01/2008 19:59:18
ANTIVIR3.VDF : 7.0.1.227    161280 Bytes  11/01/2008 19:59:18
AVEWIN32.DLL : 7.6.0.46    3084800 Bytes  13/01/2008 19:59:19
AVWINLL.DLL  : 1.0.0.7       14376 Bytes  26/02/2007 10:36:26
AVPREF.DLL   : 7.0.2.2       25640 Bytes  18/07/2007 07:39:17
AVREP.DLL    : 7.0.0.1      155688 Bytes  16/04/2007 13:16:24
AVPACK32.DLL : 7.6.0.2      360488 Bytes  13/01/2008 19:59:19
AVREG.DLL    : 7.0.1.6       30760 Bytes  18/07/2007 07:17:06
AVARKT.DLL   : 1.0.0.20     278568 Bytes  28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20      86056 Bytes  18/07/2007 07:10:18
NETNT.DLL    : 7.0.0.0        7720 Bytes  08/03/2007 11:09:42
RCIMAGE.DLL  : 7.0.1.30    2342952 Bytes  07/08/2007 12:38:13
RCTEXT.DLL   : 7.0.62.0      86056 Bytes  21/08/2007 12:50:37
SQLITE3.DLL  : 3.3.17.1     339968 Bytes  23/07/2007 09:37:21

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: F:, 
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: dimanche 13 janvier 2008  21:10

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
11 processes with 11 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
      [NOTE]      No virus was found!
Boot sector 'D:\'
      [NOTE]      No virus was found!
Boot sector 'E:\'
      [NOTE]      No virus was found!
Boot sector 'F:\'
      [NOTE]      No virus was found!

Starting to scan the registry.
C:\WINDOWS\system32
tos.exe
      [WARNING]   The file could not be opened!
The registry was scanned ( '25' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\ienudwqs.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was moved to '47f870c5.qua'!
C:\ldclvlsg.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was moved to '47ed70c7.qua'!
C:\pagefile.sys
      [WARNING]   The file could not be opened!
C:\ysxl.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was moved to '480270da.qua'!
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\480270da.qua
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was moved to '47ba70a4.qua'!
C:\Documents and Settings\bouhmadouche\Application Data\Copy Bolt Type\cash safe stupid test.exe
      [DETECTION] Is the Trojan horse TR/Obfusgen.A.5436
      [INFO]      The file was moved to '47fd70da.qua'!
C:\Documents and Settings\bouhmadouche\Application Data\Copy Bolt Type\lkczmkgu.exe
      [DETECTION] Is the Trojan horse TR/Obfusgen.A.5437
      [INFO]      The file was moved to '47ed70e7.qua'!
C:\Documents and Settings\bouhmadouche\Local Settings\Temp\gos3A.tmp
      [DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
      [INFO]      The file was moved to '47fd7150.qua'!
C:\Documents and Settings\bouhmadouche\Mes documents\AVG.Anti-Spyware.7.5.0.50-Patch_CiM.rar
  [0] Archive type: RAR
  --> Avg-Anti-Spyware-v7.5.0.50-patch_CiM.exe
      [DETECTION] Is the Trojan horse TR/Generic.4690
      [INFO]      The file was moved to '47d171e7.qua'!
C:\Documents and Settings\bouhmadouche\Mes documents\license code avg anti spyware 7.5.0.50.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.cro
      [INFO]      The file was moved to '47ed7209.qua'!
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\FF0M2KJV\xall[1].htm
      [DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
      [INFO]      The file was moved to '47f6723c.qua'!
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\NXI9YF9U\xall[1].htm
      [DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
      [INFO]      The file was moved to '47f67244.qua'!
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\NXI9YF9U\xall[2].htm
      [DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
      [INFO]      The file was moved to '47f6724d.qua'!
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\NXI9YF9U\xall[3].htm
      [DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
      [INFO]      The file was moved to '47f6724f.qua'!
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\85AJG927\xall[1].htm
      [DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
      [INFO]      The file was moved to '47f67252.qua'!
C:\Program Files\Circle Developement\Uninstall.exe
      [DETECTION] Is the Trojan horse TR/Obfusgen.A.5368
      [INFO]      The file was moved to '47f375dd.qua'!
C:\Program Files\Mozilla Firefox\install.exe~
      [DETECTION] Is the Trojan horse TR/Dldr.Small.gmd
      [INFO]      The file was moved to '47fd780a.qua'!
C:\WINDOWS\system32\compatU.dll
      [DETECTION] Is the Trojan horse TR/BHO.agz.14
      [WARNING]   An error has occurred and the file was not deleted. ErrorID: 16003
      [WARNING]   The file could not be deleted!
C:\WINDOWS\system32\dxdss.sys
      [WARNING]   The file could not be opened!
C:\WINDOWS\system32
tos.exe
      [WARNING]   The file could not be opened!
C:\WINDOWS\system32\wsnpoem\audio.dll
      [WARNING]   The file could not be opened!
C:\WINDOWS\system32\wsnpoem\video.dll
      [WARNING]   The file could not be opened!
C:\WINDOWS\Temp	mp3B.tmp
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!
Begin scan in 'D:\' <ELECT INFO2>


End of the scan: dimanche 13 janvier 2008  22:01
Used time: 51:00 min

The scan has been canceled!

   2396 Scanning directories
 149940 Files were scanned
     18 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
     16 files were moved to quarantine
      0 files were renamed
      6 Files cannot be scanned
 149922 Files not concerned
    760 Archives were scanned
      7 Warnings
      0 Notes

momo54 · Answer

re face d'ange je crois que ca va nettement mieux avec antivir, il resterais eventuellement un autre fichier qui ne veux pas s'effacer(ntos.exe) quand je l'ai envoyé pour analyse (hijacckthis) ; à effacer à tout prix merci pour tout Face d'ange à+ voici la fin du rapport antivir pour d,e,et f. AntiVir PersonalEdition Classic Report file date: lundi 14 janvier 2008 07:55 Scanning for 1027920 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15 ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 19:59:18 ANTIVIR2.VDF : 7.0.1.205 620544 Bytes 08/01/2008 19:59:18 ANTIVIR3.VDF : 7.0.1.227 161280 Bytes 11/01/2008 19:59:18 AVEWIN32.DLL : 7.6.0.46 3084800 Bytes 13/01/2008 19:59:19 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.6.0.2 360488 Bytes 13/01/2008 19:59:19 AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21 Configuration settings for the scan: Jobname..........................: Manual Selection Configuration file...............: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\folder.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: F:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: lundi 14 janvier 2008 07:55 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'wuauclt.exe' - '1' Module(s) have been scanned Scan process 'wscntfy.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'ServiceLayer.exe' - '1' Module(s) have been scanned Scan process 'iPodService.exe' - '1' Module(s) have been scanned Scan process 'ashWebSv.exe' - '1' Module(s) have been scanned Scan process 'ashMaiSv.exe' - '1' Module(s) have been scanned Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned Scan process 'MPAPI3s.exe' - '1' Module(s) have been scanned Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned Scan process 'Gestionnaire Antidote.exe' - '1' Module(s) have been scanned Scan process 'PcSync2.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'ashDisp.exe' - '1' Module(s) have been scanned Scan process 'LAUNCH~1.EXE' - '1' Module(s) have been scanned Scan process 'qttask.exe' - '1' Module(s) have been scanned Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'ashServ.exe' - '1' Module(s) have been scanned Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 40 processes with 40 modules were scanned Start scanning boot sectors: Boot sector 'D:\' [NOTE] No virus was found! Boot sector 'E:\' [NOTE] No virus was found! Boot sector 'F:\' [NOTE] No virus was found! Starting to scan the registry. C:\WINDOWS\system32 tos.exe [WARNING] The file could not be opened! The registry was scanned ( '28' files ). Starting the file scan: Begin scan in 'D:\' D:\System Volume Information\_restore{130D3A65-A3C4-4333-895C-46A5653A1A10}\RP21\A0043211.exe [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.DN.2 Backdoor server programs [INFO] The file was moved to '47bb0805.qua'! D:\Documents and Settings\Shared\Nokia N70 & N90 Pack 2005 (Java & Symbian Apps, Games & Themes).zip [0] Archive type: ZIP --> WR Nokia N70 & N90 Pack/APPLICATIONS/Symbian/ProfiMail 2.32 + keygen/ProfiMail_kg.exe [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen [INFO] The file was moved to '47f60a02.qua'! D:\Documents and Settings\ \Shared\livre bricolage enfants - 1000 activités pour petites mains.zip [0] Archive type: ZIP --> Setup.exe [DETECTION] Contains detection pattern of the worm WORM/Rbot.174080 [INFO] The file was deleted! D:\bpsvg.exe [DETECTION] Is the Trojan horse TR/Agent.2852597 [INFO] The file was deleted! D:\flvplayer.zip [0] Archive type: ZIP --> Setup.exe [DETECTION] Is the Trojan horse TR/Agent.1877775 [INFO] The file was deleted! Begin scan in 'E:\' Begin scan in 'F:\' End of the scan: lundi 14 janvier 2008 08:58 Used time: 1:03:03 min The scan has been done completely. 1033 Scanning directories 215067 Files were scanned 5 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 3 files were deleted 0 files were repaired 2 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 215062 Files not concerned 1484 Archives were scanned 1 Warnings 7 Notes

clownface · Answer

Bonsoir,

tu vas encore refaire un scan avec antivir, et tu vas suivre le tuto pour qu'il cherche egalement les rootkits
la je vois : Search for rootkits..............: off 

tu vas aller sur https://www.virustotal.com/gui/
et tu envoies le fichier : C:\WINDOWS\system32
tos.exe
s'il est infecté tu le supprimes manuellement de ton pc
(si tu n'y arrive pas, redémarre en mode sans echec pour le faire)

après tout ça, j'veux bien voir ton hijackthis...

momo54 · Answer

salut face d'ange excuse pour le retard, j'ai attrapé un virus mais cette fois c'est la grippe, donc j'ai donné tout ce que tu m'as dis à un ami et il n'ya bplus aucun problème sur le micro il est  clean rt en plus il roule rapidement.
 merci pour tout et à bientôt surccm 
CIAO FACE D'ANGE

clownface · Answer

salut,

cool, pour celui de la grippe je ne peux rien faire pour toi....

Adssite_sidebar.dll

19 réponses

Newsletters