smitfraud.c Impossible de le virer + explorer.exe erreur

Marsh Posté le 24-06-2005 à 17:16:53

Bon, j'ai choppé des virus sur mon pc, et impossible de les enlever.

J'ai scanné en mode sans echec avec cleanup, a2, adware, spybot, trojan remover.

Plusieurs d'entre eux m'ont trouvés quelque choses, mais rien de bien flagrant.
Car j'ai tjs le plus important.

Donc pour l'erreur :
a fatal error in IE has occured at 0028:C0011E36 in VXD VMM<O1> + 00010E36. Error was caused by Trokan-Spy.HTML.smitfraud.c

Et une seconde qui m'empeche de faire la moindre chose:

Erreur explorer.exe toutes les 15secondes
AppName: explorer.exe AppVer: 6.0.2600.0 ModName: unknown
ModVer: 0.0.0.0 Offset: 00000000

Qu'est ce que je peux faire now a part format?

Reply

Marsh Posté le 24-06-2005 à 17:16:53

Reply

Marsh Posté le 24-06-2005 à 17:37:35

Logfile of HijackThis v1.99.1
Scan saved at 17:36:32, on 24/06/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\shnlog.exe
C:\WINDOWS\System32\msole32.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\WINDOWS\System32\LVCOMSX.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\WINDOWS\System32\hookdump.exe
C:\Program Files\a2\a2guard.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\intmon.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\FDP\HijackThis.exe
C:\WINDOWS\explorer.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oneclicksearches.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.oneclicksearches.com/bar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oneclicksearches.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.oneclicksearches.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.oneclicksearches.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.oneclicksearches.com/search.php?qq=%1
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.oneclicksearches.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=explorer.exe, msmsgs.exe
O2 - BHO: VMHomepage Class - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFA} - C:\WINDOWS\System32\hpA0C4.tmp
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [RegSvr32] C:\WINDOWS\System32\msmsgs.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PSGuard] C:\Program Files\PSGuard\PSGuard.exe
O4 - HKCU\..\Run: [Intel system tool] C:\WINDOWS\System32\hookdump.exe
O4 - HKCU\..\Run: [a-squared] "C:\Program Files\a2\a2guard.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/23d2d9 [...] 601_fr.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft. [...] 8844195046
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537 [...] scan53.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/bina [...] b32846.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O20 - Winlogon Notify: style2 - C:\WINDOWS\q178640_disk.dll
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

Reply

Marsh Posté le 24-06-2005 à 20:08:56

Je viens de finir un scan avec avast... y m'a encore trouvé des trucs, mais tjs erreur explorer.exe et écran bleu...

moué...

Reply

Marsh Posté le 24-06-2005 à 20:13:58

C:\Windows\System32\HpA97E.tmp
Y me dit que j'ai un virus la dessus, mais que le fichier est utilisé par un autre processus?

Bon, et sinon personne a une idée de quoi faire... ?

Reply

Marsh Posté le 24-06-2005 à 21:55:10

ok well merci

Reply

Marsh Posté le 25-06-2005 à 00:35:50

Bonsoir je regarde ton rapport réponse dans un moment.

Reply

Marsh Posté le 25-06-2005 à 00:58:34

Re procédure longue et un peu complexe...

1 Assure toi d'avoir accès à tous les fichiers.

Citation :

Poste de travail
Menu "Outils", "Option des dossiers", onglet "Affichage" :
Activer la case : "Afficher les fichiers et dossiers cachés"
Désactiver la case : "Masquer les extensions des fichiers dont le type est connu"
Désactiver la case : "Masquer les fichiers protégés du système d'exploitation"
Puis "Appliquer".

2 Télécharge les outils suivants:
*PocketKillBox
http://www.bleepingcomputer.com/fi [...] illBox.zip
Dézippe sur le bureau

*DelDomain.inf
http://www.mvps.org/winhelp2002/restricted.htm

*EasyCleaner
http://personal.inet.fi/business/toniarts/ecleane.htm

*Hoster
http://www.funkytoad.com/download/hoster.zip

*Smitfraud.reg
http://www.bleepingcomputer.com/fi [...] tfraud.reg
Clic droit> enregister la cible sous: bureau

IMPORTANT
Tu dois effectuer toutes les corrections HORS CONNEXION. Imprime cette page

-3-Désinstalle via Ajout/suppression des programmes du panneau de configuration le(s) programme(s) suivant(s)si présents:

Security IGuard
Virtual Maid
Search Maid
Spywarevanisher
DAP< nid à spyware

-4-Double-clique sur smitfraud.reg et clique sur Oui lorsqu'on te demande confirmation pour Fusionner.
Lorsque tu reçois un message du bon déroulement, supprime le fichier smitfraud.reg

-5-Lance PocketKillBox, coche la case "Delete on reboot". Ne pas fermer le programme.
Fais Démarrer ->Exécuter, tape notepad, un fichier bloc-notes s'ouvre
Ensuite tu fais Ctrl-A pour sélectionner tout le texte suivant , Ctrl-C pour le copier dans le presse papier.

Citation :

C:\wp.exe
C:\wp.bmp
C:\bsw.exe
C:\Windows\sites.ini
C:\Windows\popuper.exe
C:\Windows\System32\helper.exe
C:\Windows\System32\intmonp.exe
C:\Windows\System32\msmsgs.exe
C:\Windows\System32\ole32vbs.exe
C:\Windows\system32\msole32.exe
C:\WINDOWS\system32\hpA708.tmp
C:\WINDOWS\System32\shnlog.exe
C:\WINDOWS\System32\intmon.exe

Sur PocketKillBox-->File-->Paste from Clipboard,tu cliques ensuite sur la croix rouge
Au deux messages qui vont s'afficher,tu réponds par "YES"

6 Redémarre en mode sans échec.

7 Lance Hijackthis, scan et coche les lignes ci-dessous:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oneclicksearches.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.oneclicksearches.com/bar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oneclicksearches.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.oneclicksearches.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.oneclicksearches.com/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.oneclicksearches.com/search.php?qq=%1
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.oneclicksearches.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=explorer.exe, msmsgs.exe
O2 - BHO: VMHomepage Class - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFA} - C:\WINDOWS\System32\hpA0C4.tmp
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O4 - HKLM\..\Run: [RegSvr32] C:\WINDOWS\System32\msmsgs.exe
O4 - HKLM\..\Run: [PSGuard] C:\Program Files\PSGuard\PSGuard.exe
O4 - HKCU\..\Run: [Intel system tool] C:\WINDOWS\System32\hookdump.exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/23d2d9 [...] 601_fr.cab
O20 - Winlogon Notify: style2 - C:\WINDOWS\q178640_disk.dll

8 Ferme toutes les fenetres Internet Explorer,Outlook Express sauf Hijackthis,puis clique sur "Fix checked"

9 Supprime les fichiers et dossiers suivants si présents:

C:\Program Files\Search Maid
C:\Program Files\Virtual Maid
C:\Program Files\Security IGuard
C:\Program Files\SpywareVanisher
C:\WINDOWS\System32\hpA0C4.tmp
C:\WINDOWS\System32\msmsgs.exe
C:\Program Files\PSGuard
C:\WINDOWS\System32\hookdump.exe
C:\PROGRA~1\DAP
C:\WINDOWS\q178640_disk.dll

Vide la corbeille.

10 Redémarre normalement

11 Ouvre Hoster, et clique sur "Restore Original Hosts" ---> "OK"
Quitte le programme.

12 Fais un clic droit le fichier Del_Domains.inf -->Installer

13 Lance et exécute EasyCleaner.
N'utilise que les fonctions Inutiles et Registre.
Supprime tout ce qu'il te propose.

-14-Redémarre et poste un nouveau rapport hijackthis.

D'après la méthodologie établie par un ami: queruak

Message édité par stonangel le 25-06-2005 à 00:59:13

Reply

Marsh Posté le 25-06-2005 à 06:19:49

EXCELLENTE méthodologie, si on est CERTAIN de ne pas tuer d'EXE utiles avec KillBox...

Reply

Marsh Posté le 25-06-2005 à 10:10:46

wawaseb a écrit :

EXCELLENTE méthodologie, si on est CERTAIN de ne pas tuer d'EXE utiles avec KillBox...

Non, procédure déjà utilisée à plusieurs reprise. Ca marche...

Reply

Marsh Posté le 25-06-2005 à 14:57:55

Bonjour tout le monde,

stonangel bonjour, je profite de ton analyse pour te poser une question au sujet de PocketKillBox, dans quel cas particulier on l'utilise plutôt que la recherche et la suppression de base pour les Running processes infectés ?

Dans ce log Hijack. par exemple, je vois pas trop pourquoi on utilise la KillBox pour :
C:\Windows\System32\intmonp.exe
et la suppression "de base" pour :
C:\WINDOWS\System32\hookdump.exe

Merci d'avance et désolée pour cette intrusion

Reply

Marsh Posté le 25-06-2005 à 14:57:55

Reply

Marsh Posté le 25-06-2005 à 15:14:19

Bonjour western shadow, il s'agit d'une procédure générique: on ne voit pas certains fichiers dans HJT que Silent Runners peut révéler. Tu fais fixer par contre les lignes en fonction du log. Killbox? pour être sûr que d'entrée tu élimines tout. Peut-être aurais je dû rajouter
C:\WINDOWS\System32\hookdump.exe dans Killbox mais c'est la surprise du deuxième log. Chaque fois que j'ai utilisé cette méthode, efficacité garantie...
Tu te sers de Killbox en cas de fichier récalcitrant que tu n'arrives pas à supprimer manuellement en alternative à Delete a file on reboot de HJT.

Reply

Marsh Posté le 25-06-2005 à 15:40:21

ok merci

- Donc Silent Runners fait un balaye du système à la recherche de malwares
- KillBox même genre de balayage mais plus approndi qu'Hijack avec en plus la possibilité de supprimer des fichiers récalcitrants, effectivement c'est intéressant - mais est-ce que le log text. généré par KillBox liste uniquement des fichiers infectés ou il faut faire 1 tri ?

C'est peut être pas le bon endroit pour poser des questions ; j'ai regardé l'onglet Tutos, j'ai rien de vu de concret là-dessus ou j'ai mal regardé

Reply

Marsh Posté le 25-06-2005 à 15:45:40

Non Killbox ne balaie pas c'est un utilitaire complémentaire à HJT je te mets le lien tu verras à quoi ça ressemble:
http://www.bleepingcomputer.com/fi [...] illBox.zip
Une fois téléchargé, tu le dézippes sur ton bureau.

Utilisé uniquement pour supprimer les fichiers récalcitrants.

Reply

Marsh Posté le 25-06-2005 à 16:05:30

Salut Stonangel,

Je me suis mal exprimé ou tu m'as mal compris...
Je te félicitais pour ta technique (complète, efficace, et fiable), mais, EN GENERAL, il faut être sûr que les fichiers *.EXE qu'on démolit sont mauvais (drivers de portables, Win98, programmes spécifiques, ...)

Bien à vous tous !

Reply

Marsh Posté le 25-06-2005 à 16:12:00

stonangel a écrit :

Non Killbox ne balaie pas c'est un utilitaire complémentaire à HJT je te mets le lien tu verras à quoi ça ressemble:
http://www.bleepingcomputer.com/fi [...] illBox.zip
Une fois téléchargé, tu le dézippes sur ton bureau.

:whistle: Ayé! j'ai pigé, je viens de le télécharger rien de tel pour se faire une idée (1 fugitive fraction de seconde le dl dingue)
Pas mal en effet - merci beaucoup

Reply

Marsh Posté le 25-06-2005 à 16:21:20

:jap: De rien...

Reply

Marsh Posté le 25-06-2005 à 19:59:04

wawaseb a écrit :

Salut Stonangel,

Je me suis mal exprimé ou tu m'as mal compris...
Je te félicitais pour ta technique (complète, efficace, et fiable), mais, EN GENERAL, il faut être sûr que les fichiers *.EXE qu'on démolit sont mauvais (drivers de portables, Win98, programmes spécifiques, ...)

Bien à vous tous !

Désolé je viens de voir ton post. Les fichiers que tu détruits sont présents lors d'une infection par Smitfraud: tu peux vérifier sur Bleeping computer ou Assiste.com

Message édité par stonangel le 25-06-2005 à 20:02:58

Reply

Marsh Posté le 26-06-2005 à 13:52:04

Oui Stonangel, tu as raison, je sais que dans ce cas présent, les fichiers sont mauvais...

C'était pour éviter que des gens, comme un pote à moi, ne détruisent "LSASS.EXE" (par exemple) avec KillBox...

Bon Wik !

Reply

Marsh Posté le 26-06-2005 à 14:13:45

Merci wawaseb, à toi aussi.

Reply

Marsh Posté le 12-03-2006 à 08:13:57

bonjour j'ai le meme probleme.

je poste le fichier log:
Logfile of HijackThis v1.99.1
Scan saved at 08:13:01, on 12/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SuperCopier\SuperCopier.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\PROGRA~1\INCRED~1\bin\IMAPP.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Winamp\winamp.exe
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: 222.111.150.111 gwgt1.joymax.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [EPSON Stylus CX3200] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P19 "EPSON Stylus CX3200" /O6 "USB001" /M "Stylus CX3200"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SuperCopier.exe] C:\Program Files\SuperCopier\SuperCopier.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\WINDOWS\system32\shdocvw.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe

j'espere que vous pourrez m'aider car j'ai pas vraiment envie de formater. merci d'avance

Message édité par Darkblade6666 le 12-03-2006 à 08:14:55

Reply

Marsh Posté le 12-03-2006 à 11:31:44

up

Reply

Marsh Posté le 12-03-2006 à 13:14:34

bonjour mr le champion darkblade6 666

c'est toi qui a modifié ainsi le fichier hosts ?

Code :

j'ai le meme probleme.

télécharge SmitfrauFix de S!Ri: Moe et Balltrap34 http://siri.urz.free.fr/Fix/SmitfraudFix.zip
* décompresse-le
* double-clique sur le fichier "smitfraudfix.cmd" et choisis loption 1, il va lister tous les éléments nuisibles dans un rapport : poste le

Reply

Marsh Posté le 12-03-2006 à 16:01:28

merci de ta réponse: voila le rapport

non j'ai rien modifier du tout

SmitFraudFix v2.24

Rapport fait à 16:00:59,12 le 12/03/2006
Executé à partir de D:\fer chier\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600]

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\Administrateur\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Bureau

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Recherche éléments du bureau

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Sharedtaskscheduler

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"

[HKEY_CLASSES_ROOT\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

[HKEY_CLASSES_ROOT\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport

Message édité par Darkblade6666 le 12-03-2006 à 16:03:06

Reply

Marsh Posté le 12-03-2006 à 16:20:57

bon le fix n'a rien trouvé. C'est Spybot qui te signale Smitfraud, dans le registre ?

Quoiqu'il en soit, si ce n'est pas toi qui a effectué ces réglages, en particulier la O1 (fichier hosts donc) :

Citation :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O1 - Hosts: 222.111.150.111 gwgt1.joymax.com

tu relances HijackThis, coche ces lignes et clique FixChecked, en ayant fermé internet au préalable.

Puis fais ce scan en ligne http://www.ewido.net/en/onlinescan/ ("start scanner" ) et poste le rapport.

Reply

Marsh Posté le 12-03-2006 à 16:42:34

oui, c'est spybot qui affiche sa. je vais faire sa et je reposte apres. merci

Reply

Marsh Posté le 12-03-2006 à 16:54:45

__________________________________________________
ewido security suite online scanner
http://www.ewido.net
__________________________________________________

Name: TrackingCookie.Valueclick
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@valueclick[1].txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@adtech[1].txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@tradedoubler[2].txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@bluestreak[1].txt
Risk: Medium

Name: TrackingCookie.Estat
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@estat[1].txt
Risk: Medium

Name: TrackingCookie.Ivwbox
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@ivwbox[1].txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@as-eu.falkag[1].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@bs.serving-sys[1].txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@revenue[1].txt
Risk: Medium

Name: TrackingCookie.Com
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@com[2].txt
Risk: Medium

Name: TrackingCookie.Smartadserver
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@www.smartadserver[1].txt
Risk: Medium

Name: TrackingCookie.Comclick
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@fl01.ct2.comclick[2].txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@cs.sexcounter[2].txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@casalemedia[1].txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@as-us.falkag[1].txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@z1.adserver[1].txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@tribalfusion[1].txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@blackbox.weborama[1].txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@iv2.bluestreak[1].txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@weborama[1].txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@server.iad.liveperson[1].txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@247realmedia[2].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@content.overture[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@2o7[2].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@serving-sys[2].txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@statcounter[2].txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@bluestreak[2].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@ad.yieldmanager[2].txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: C:\Documents and Settings\Administrateur\Cookies\administrateur@as1.falkag[2].txt
Risk: Medium

Name: Adware.180Solutions
Path: HKU\S-1-5-21-2000478354-1123561945-839522115-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{56F1D444-11BF-4879-A12B-79CF0177F038}
Risk: Medium

Name: Adware.WinAD
Path: [200] C:\Program Files\MediaGateway\MediaGateway.exe
Risk: Medium

Name: Downloader.Adload.t
Path: C:\WINDOWS\system32\dr.exe
Risk: High

Name: Dropper.Agent.mf
Path: C:\WINDOWS\system32\xxx.exe
Risk: High

Name: Adware.WinAD
Path: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\TRAELGZF\bridge-c18[1].cab/MediaGatewayX.dll
Risk: Medium

Name: Adware.WinAD
Path: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\AQIDK3AE\MediaGateway[1].exe
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: :mozilla.29:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Overture
Path: :mozilla.30:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Overture
Path: :mozilla.31:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: :mozilla.35:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.40:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.41:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.42:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Smartadserver
Path: :mozilla.59:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Smartadserver
Path: :mozilla.60:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Smartadserver
Path: :mozilla.61:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Smartadserver
Path: :mozilla.62:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.82:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.83:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.84:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.85:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.87:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.88:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.89:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.90:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.91:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.92:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.93:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.94:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.95:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.96:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.97:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.98:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.99:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.100:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.101:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.102:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.103:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.104:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.105:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.106:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.107:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.108:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.109:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.110:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.116:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Estat
Path: :mozilla.117:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.128:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.129:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.130:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.131:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.132:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.159:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.160:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.161:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.162:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.163:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.164:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.165:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: :mozilla.175:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.176:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.178:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.179:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.180:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.181:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.182:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.183:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.184:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.185:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.186:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.187:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.188:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.189:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.206:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.207:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.208:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.216:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.217:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.218:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.219:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.220:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: :mozilla.221:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.266:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.267:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.268:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.269:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.270:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.271:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.272:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.273:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.274:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.275:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.276:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.277:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.298:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.299:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.300:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.301:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.302:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.304:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.305:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: :mozilla.306:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: :mozilla.310:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sitestat
Path: :mozilla.315:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.316:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.317:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.318:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.319:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Valueclick
Path: :mozilla.320:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Valueclick
Path: :mozilla.321:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casinotropez
Path: :mozilla.385:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: :mozilla.397:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.423:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.424:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.425:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.426:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Com
Path: :mozilla.468:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Com
Path: :mozilla.469:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.533:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.560:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.591:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Hotlog
Path: :mozilla.611:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yadro
Path: :mozilla.613:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Spylog
Path: :mozilla.615:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yadro
Path: :mozilla.616:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Clickhype
Path: :mozilla.642:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Comclick
Path: :mozilla.647:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Comclick
Path: :mozilla.648:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Comclick
Path: :mozilla.649:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Valueclick
Path: :mozilla.669:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Overture
Path: :mozilla.674:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sitestat
Path: :mozilla.675:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.684:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.685:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.686:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.687:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.688:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.689:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.690:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.691:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.692:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.693:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.694:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.695:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: :mozilla.697:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.722:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.731:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.733:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: :mozilla.766:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: :mozilla.767:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.768:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.769:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sitestat
Path: :mozilla.799:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: :mozilla.821:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: :mozilla.822:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: :mozilla.836:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.947:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.948:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.949:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.950:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.951:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: Adware.WinAD
Path: C:\Program Files\MediaGateway\MediaGateway.exe
Risk: Medium

ps: j'ai cliquer sur corriger je redonne le rapport apres

Message édité par Darkblade6666 le 12-03-2006 à 16:56:24

Reply

Marsh Posté le 12-03-2006 à 16:59:39

il en a virer une quarantaine: il reste sa

__________________________________________________
ewido security suite online scanner
http://www.ewido.net
__________________________________________________

Name: TrackingCookie.Doubleclick
Path: :mozilla.29:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Overture
Path: :mozilla.30:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Overture
Path: :mozilla.31:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: :mozilla.35:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.39:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.40:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.41:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Smartadserver
Path: :mozilla.58:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Smartadserver
Path: :mozilla.59:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Smartadserver
Path: :mozilla.60:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Smartadserver
Path: :mozilla.61:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.81:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.82:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.83:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.84:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.86:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.87:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.88:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.89:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.90:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.91:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.92:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.93:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.94:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.95:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.96:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.97:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.98:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.99:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.100:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.101:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.102:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.103:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.104:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.105:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.106:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.107:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.108:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.109:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.115:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Estat
Path: :mozilla.116:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.127:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.128:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.129:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.130:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.131:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.158:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.159:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.160:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.161:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.162:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.163:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.164:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: :mozilla.174:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.175:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.177:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.178:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.179:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.180:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.181:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.182:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.183:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.184:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.185:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.186:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.187:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.188:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.205:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.206:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.207:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.215:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.216:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.217:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.218:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.219:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: :mozilla.220:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.265:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.266:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.267:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.268:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.269:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.270:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.271:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.272:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.273:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.274:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.275:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.276:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.297:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.298:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.299:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.300:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.301:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.303:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.304:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: :mozilla.305:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: :mozilla.309:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sitestat
Path: :mozilla.314:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.315:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.316:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.317:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.318:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Valueclick
Path: :mozilla.319:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Valueclick
Path: :mozilla.320:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casinotropez
Path: :mozilla.384:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: :mozilla.396:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.422:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.423:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.424:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.425:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Com
Path: :mozilla.467:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Com
Path: :mozilla.468:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.532:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.559:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.590:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Hotlog
Path: :mozilla.610:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yadro
Path: :mozilla.612:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Spylog
Path: :mozilla.614:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yadro
Path: :mozilla.615:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Clickhype
Path: :mozilla.641:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Comclick
Path: :mozilla.646:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Comclick
Path: :mozilla.647:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Comclick
Path: :mozilla.648:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Valueclick
Path: :mozilla.668:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Overture
Path: :mozilla.673:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sitestat
Path: :mozilla.674:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.683:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.684:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.685:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.686:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.687:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.688:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.689:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.690:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.691:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.692:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.693:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.694:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: :mozilla.696:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.721:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.730:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.732:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: :mozilla.765:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: :mozilla.766:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.767:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.768:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Sitestat
Path: :mozilla.798:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: :mozilla.820:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: :mozilla.821:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: :mozilla.835:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.946:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.947:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.948:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.949:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.950:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ekrpitlk.default\cookies.txt
Risk: Medium

Name: Adware.WinAD
Path: C:\Program Files\MediaGateway\__delete_on_reboot__MediaGateway.exe
Risk: Medium

apres le spybot il est toujours la.

Message édité par Darkblade6666 le 12-03-2006 à 17:03:32

Reply

Marsh Posté le 12-03-2006 à 17:19:55

hum beaucoup de cookies. Tu dois savoir que les cookies ne sont pas une fatalité, si tu veux je t'expliquerais comment les bloquer un peu plus tard

Le ménage :

démarrer/exécuter, tape regedit et supprime ce qui est en gras :

HKU\S-1-5-21-2000478354-1123561945-839522115-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{56F1D444-11BF-4879-A12B-79CF0177F038}

ferme regedit

* Démarre en mode sans échec, et désinstalle cette application si tu la trouves dans ajout/supp de programmes : MediaGateway

supprime le répertoire résiduel, ensuite : C:\Program Files\MediaGateway

ainsi que ces fichiers, si tu les trouves encore :

C:\WINDOWS\system32\dr.exe
C:\WINDOWS\system32\xxx.exe

Firefox : Outils - Options - Vie Privée, cliquer sur "Supprimer les cookies"
IE : outils/options internet/supprimer les fichiers, supprimer les cookies

reste à vider la corbeille.

Redémarrer normalement. Nouveau rapport Ewido.

Et poste le rapport de Spybot avec ce smitfraud. Je pense qu'il est quelque part dans Zonemap settings, quelque chose comme ça

Reply

Marsh Posté le 12-03-2006 à 18:46:44

voila spybot:
Smitfraud-C.: Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\drsmartload2

--- Spybot - Search && Destroy version: 1.3 ---
2006-03-10 Includes\Cookies.sbi
2006-03-10 Includes\Dialer.sbi
2006-03-10 Includes\Hijackers.sbi
2006-03-10 Includes\Keyloggers.sbi
2006-03-10 Includes\Malware.sbi
2006-03-10 Includes\Revision.sbi
2006-03-10 Includes\Security.sbi
2006-03-10 Includes\Spybots.sbi
2006-03-10 Includes\Trojans.sbi
2004-05-12 Includes\LSP.sbi
2005-02-17 Includes\Tracks.uti
2006-03-10 Includes\PUPS.sbi

l'autre est en cours de test

edit: sur ewido c'est clean :hello:

Message édité par Darkblade6666 le 12-03-2006 à 18:51:34

Reply

Marsh Posté le 12-03-2006 à 19:33:38

bon, je m'attendais pas cette clé en fait.

Regedit> supprime ce qui est en gras : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\drsmartload2

si tu as un message d'erreur, signale-le

sinon tu redémarres le pc, et refais un scan Spybot pour voir où ça en est.

------

edit> elle est vieille ta version de Spybot au fait : "Spybot - Search && Destroy version: 1.3"

Message édité par eZula le 12-03-2006 à 19:34:58

Reply

Marsh Posté le 12-03-2006 à 20:25:22

ok, c'est clean je te remercie de m'avoir aider et pour ta patience :hello:

Message édité par Darkblade6666 le 12-03-2006 à 20:25:33

Reply

Marsh Posté le 12-03-2006 à 20:37:22

parfait

supprime le SmitfraudFix, il est mis à jour très souvent

edit > désinstalle Spybot 1.3, supprime les dossiers :
C:\Program Files\Spybot - Search & Destroy

la dernière version 1.4 est ici http://www.safer-networking.org/fr/download/index.html

A++

Message édité par eZula le 12-03-2006 à 20:39:14

Reply

Marsh Posté le

Reply

smitfraud.c Impossible de le virer + explorer.exe erreur

Sujets relatifs:

Leave a Replay