Computing.Net > Forums > Security and Virus > ad popup in IE and Firefox

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

ad popup in IE and Firefox

Reply to Message Icon

Original Message
Name: fluo
Date: March 11, 2007 at 01:09:42 Pacific
Subject: ad popup in IE and Firefox
OS: XP SP2
CPU/Ram: Core Duo RAM:1Go
Model/Manufacturer: HP nx9420
Comment:

Hi,

I have an adware and maybe also virus running on my computer. (The adware opens new webpage in IE and Firefox)
I have ran a few antivirus & antispyware but they did not find anything.

I can send you a hijackthis & smitfraudfix if requested.

Thanks in advance,

David


Report Offensive Message For Removal


Response Number 1
Name: jabuck
Date: March 11, 2007 at 08:04:39 Pacific
Reply: (edit)

Please post the logs.


Report Offensive Follow Up For Removal

Response Number 2
Name: fluo
Date: March 11, 2007 at 09:15:24 Pacific
Reply: (edit)

Here is the hijackthis log file:

Logfile of HijackThis v1.99.1
Scan saved at 21:37:57, on 08/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\IFXTCS.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\CoSine Communications\IPSec Dial Client\IPSecMon.exe
C:\Program Files\CoSine Communications\IPSec Dial Client\IreIKE.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Equant\Dialer\EACSvrMngr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\IFXSPMGT.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Citrix\Client ICA\ssonsvr.exe
C:\Program Files\HPQ\IAM\bin\asghost.exe
C:\Program Files\ProtectTools\Embedded Security Software\PSDsrvc.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Iomega\REV System Software\RevUDF.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\TIREMOTE\wuser32.exe
C:\WINDOWS\TIREMOTE\TIRemoteService.exe
C:\Program Files\VMware\VMware Server\vmware-authd.exe
C:\Program Files\Fichiers communs\VMware\VMware Virtual Image Editing\vmount2.exe
C:\WINDOWS\system32\vmnat.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\ProtectTools\Embedded Security Software\PSDrt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ProtectTools\Embedded Security Software\SpTna.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\HPQ\HP ProtectTools Security Manager\PTServs.exe
C:\WINDOWS\system32\IfxUAGUI.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\WINDOWS\SMINST\Scheduler.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Iomega\REV System Software\imiconxp.exe
C:\Program Files\Logitech\SetPoint\LBTWiz.exe
C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
C:\Program Files\VMware\VMware Server\vmserverdWin32.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\CoSine Communications\IPSec Dial Client\SafeCfg.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Fichiers communs\Logitech\KhalShared\KHALMNPR.EXE
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Symantec AntiVirus\vpc32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\mmc.exe
C:\WINDOWS\system32\DfrgNtfs.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Documents\DOMSOF-djacquens\Mes Telechargements\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?Lin...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?Lin...
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Iomega ImIconXP] C:\Program Files\Iomega\REV System Software\imiconxp.exe
O4 - HKLM\..\Run: [Logitech BT Wizard] LBTWiz.exe -silent
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll,RegisterModule
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: SoftRemote.lnk = C:\Program Files\CoSine Communications\IPSec Dial Client\SafeCfg.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {2DEF4530-8CE6-41C9-84B6-A54536C90213} (Crystal Report Viewer Control 9) - http://intrasof/tiweb70/viewers/act...
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/act...
O16 - DPF: {576756A1-D97C-45D0-A945-0324019A131E} (BOSIActiveFormX Control) - http://intrasof/tiweb70/downloads/B...
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {6AF2E1A7-A16E-4503-A440-07CA49122CCE} (BOSIRichEditActiveX Control) - http://intrasof/tiweb70/downloads/B...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microso...
O16 - DPF: {76850F2A-FCAA-454F-82D3-BD46CB186EF5} (IEGCtrl Class) - http://sofocle/uniface-jti-activex.cab
O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab
O16 - DPF: {BF985246-09BF-11D2-BE62-006097DF57F6} (SimCityX Control) - http://simcity.ea.com/play/classic/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/g...
O16 - DPF: {D3D83E08-54D1-4E9D-8EAF-9F979D139294} (MaxisSimCityScapeTeleX Control) - http://simcity.ea.com/scape/telepor...
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = toto.rsx
O17 - HKLM\Software\..\Telephony: DomainName = toto.rsx
O17 - HKLM\System\CCS\Services\Tcpip\..\{D77F7070-7B58-48D4-A258-6B1E93A204CC}: Domain = toto.rsx
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = toto.rsx
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = toto.rsx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: x-excid - {9D6CC632-1337-4A33-9214-2DA092E776F4} - C:\WINDOWS\Downloaded Program Files\mimectl.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: APSHook.dll
O20 - Winlogon Notify: IfxWlxEN - C:\WINDOWS\SYSTEM32\IfxWlxEN.dll
O20 - Winlogon Notify: LBTWlgn - c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: OneCard - C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll
O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Elève pcAnywhere (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: (Equant Access Companion) Services Manager (EACSvrMngr) - Equant - C:\Program Files\Equant\Dialer\EACSvrMngr.exe
O23 - Service: (Equant Access Companion) Devices and Services Monitoring (EACSys) - Equant - C:\Program Files\Equant\Dialer\EACSys.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\WINDOWS\system32\IFXSPMGT.exe
O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\WINDOWS\system32\IFXTCS.exe
O23 - Service: SafeNet Monitor Service (IPSECMON) - SafeNet - C:\Program Files\CoSine Communications\IPSec Dial Client\IPSecMon.exe
O23 - Service: SafeNet IKE Service (IREIKE) - SafeNet - C:\Program Files\CoSine Communications\IPSec Dial Client\IreIKE.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - C:\Program Files\ProtectTools\Embedded Security Software\PSDsrvc.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: RevUDFService - Iomega Corp - C:\Program Files\Iomega\REV System Software\RevUDF.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Track-It! Remote Control (TIRmtCtl) - Intuit Track-It! - C:\WINDOWS\TIREMOTE\wuser32.exe
O23 - Service: Track-It! Workstation Manager (TIRmtSvc) - Numara Software, Inc. - C:\WINDOWS\TIREMOTE\TIRemoteService.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Server\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Program Files\Fichiers communs\VMware\VMware Virtual Image Editing\vmount2.exe
O23 - Service: VMware Registration Service (vmserverdWin32) - VMware, Inc. - C:\Program Files\VMware\VMware Server\vmserverdWin32.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe


here is the smitfraudfix result:

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="APSHook.dll"


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

David


Report Offensive Follow Up For Removal

Response Number 3
Name: jabuck
Date: March 11, 2007 at 12:42:00 Pacific
Reply: (edit)

Go to start > run and type: regsvr32 /u occache.dll
(or copy and paste this in the field in start > run )
Click Ok

Now search and delete:

C:\WINDOWS\Downloaded Program Files\mimectl.dll

Go to start > run and type regsvr32 occache.dll
Click OK.

Please download ATF-Cleaner to your desktop from this link
http://www.atribune.org/content/view/19/2/ We will need it later in safe mode

Download and install AVG Anti-Spyware We will need this later in safe mode

Be sure to update AVG Anti- Spyware

Next, please reboot your computer in Safe Mode by doing the following :

Restart your computer

After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;

Instead of Windows loading as normal, a menu with options should appear;

Select the first option, to run Windows in Safe Mode, then press "Enter".

Choose your usual account.

Run Hijack This from safe mode, close all windows except Hijack This, place a check to the left of the following items and press "fix checked":

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O18 - Protocol: x-excid - {9D6CC632-1337-4A33-9214-2DA092E776F4} - C:\WINDOWS\Downloaded Program Files\mimectl.dll

Run ATF-Cleaner from safe mode.Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

Empty the restore folder. Go to start>control panel>system>system restore tab>check the box beside "turn off system restore>apply (takes a minute)>ok. Go back and uncheck the box to turn system restore back on>apply>ok.

In Safe Mode, run AVG Anti-spyware and click on the Scanner tab at the top. Click the "Settings" tab and then change the recommended action to Quarantine and click Automatically generate report after every scan. Click back to the "Scan" tab and then click on Complete System Scan. This scan can take quite a while to run, so be prepared.

AVG Anti-Spyware will list any infections found on the left hand side. When the scan has finished, it will automatically set the recommended action. Click the Apply all actions button. AVG Anti-Spyware will display "All actions have been applied" on the right hand side.

Click on "Save Report", then "Save Report As". This will create a text file. Make sure you know where to find this file again (like on the Desktop).

Post the AVG-AntiSpyware report please.

Your java is out of date and should be updated immediately. Download the latest version of http://java.sun.com/javase/downloads/index.jsp

Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".

Click the "Download" button to the right.

Check the box that says: "Accept License Agreement". The page will refresh.

Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.

Close any programs you may have running - especially your web browser.

Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java. Check any item with Java Runtime Environment (JRE or J2SE) in the name. It should have the "coffee cup" icon next to it.

Click the Remove or Change/Remove button. Repeat as many times as necessary to remove each Java versions.

Reboot your computer once all Java components are removed

. Then from your desktop double-click on jre-1_6_0-windowsi586-p.exe to install the newest version.


Report Offensive Follow Up For Removal

Response Number 4
Name: fluo
Date: March 13, 2007 at 01:56:35 Pacific
Reply: (edit)

Hi,

Thanks for your help.
here is the log file:
The problem was that i was unable to run AVG in my normal account as I usually use a AD account.


AVG Anti-Spyware - Rapport d'analyse


+ Créé à: 23:08:54 12/03/2007

+ Résultat de l'analyse:

:mozilla.249:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.250:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.100:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.101:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.102:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.103:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.104:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.105:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.106:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.107:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.108:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.109:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.110:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.111:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.112:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.113:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.114:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.115:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.116:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.117:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.118:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.119:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.120:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.121:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.122:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.123:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.124:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.125:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.126:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.127:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.128:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.129:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.130:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.131:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.132:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.133:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.134:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.135:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.136:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.137:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.138:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.139:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.140:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.141:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.142:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.162:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.175:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.536:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.588:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.621:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.641:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.699:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.901:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.93:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.94:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.95:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.96:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.97:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.98:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.99:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.15:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.17:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.27:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.28:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.391:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.403:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.291:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.292:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.293:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.294:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.295:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.181:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.307:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.744:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.323:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Burstnet : Aucune action entreprise.
:mozilla.324:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Burstnet : Aucune action entreprise.
:mozilla.410:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
:mozilla.555:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.556:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.557:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.707:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Coremetrics : Aucune action entreprise.
:mozilla.10:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.13:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.16:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.21:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.6:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.7:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.9:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.145:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
:mozilla.539:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.540:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.541:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.542:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
:mozilla.404:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Fastclick : Aucune action entreprise.
:mozilla.277:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
:mozilla.302:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.333:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.334:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.365:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.515:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.517:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.633:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.666:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.667:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.668:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.71:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.721:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.72:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.736:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.73:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.74:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.857:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.862:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.863:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.864:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.880:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.881:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.893:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.909:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Hotlog : Aucune action entreprise.
:mozilla.442:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Ivwbox : Aucune action entreprise.
:mozilla.613:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Liveperson : Aucune action entreprise.
:mozilla.614:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Liveperson : Aucune action entreprise.
:mozilla.615:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Liveperson : Aucune action entreprise.
:mozilla.50:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.51:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.953:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Onestat : Aucune action entreprise.
:mozilla.954:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Onestat : Aucune action entreprise.
:mozilla.70:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.789:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.889:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.890:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.891:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.892:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Pointroll : Aucune action entreprise.
:mozilla.767:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
:mozilla.768:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
:mozilla.871:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Real : Aucune action entreprise.
:mozilla.872:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Real : Aucune action entreprise.
D:\temp\jcseulin\Sauvegarde_Dell\jseulin.ADMINISTRATEUR.bak\Cookies\jseulin@france.real[1].txt -> TrackingCookie.Real : Aucune action entreprise.
D:\temp\jcseulin\Sauvegarde_Dell\jseulin.ADMINISTRATEUR.bak\Cookies\jseulin@real[2].txt -> TrackingCookie.Real : Aucune action entreprise.
D:\temp\jcseulin\Sauvegarde_Dell\jseulin.ADMINISTRATEUR.bak\Cookies\jseulin@www.real[2].txt -> TrackingCookie.Real : Aucune action entreprise.
:mozilla.80:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
:mozilla.81:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
:mozilla.82:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
:mozilla.83:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
:mozilla.84:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
:mozilla.968:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Revsci : Aucune action entreprise.
:mozilla.969:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Revsci : Aucune action entreprise.
:mozilla.607:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.608:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.609:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.610:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.611:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.612:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.278:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.281:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.313:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.450:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.451:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.690:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.691:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.41:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.42:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.43:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.44:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.910:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Spylog : Aucune action entreprise.
:mozilla.626:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Statcounter : Aucune action entreprise.
:mozilla.627:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Statcounter : Aucune action entreprise.
:mozilla.325:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise.
:mozilla.326:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise.
:mozilla.252:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.256:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.257:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.258:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.431:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Trafic : Aucune action entreprise.
:mozilla.14:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
:mozilla.8:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
:mozilla.36:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.38:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.39:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.40:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.297:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
:mozilla.859:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
:mozilla.860:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
:mozilla.56:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.57:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.60:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.62:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.
:mozilla.63:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.
:mozilla.64:C:\Documents and Settings\myaccount\Application Data\Mozilla\Firefox\Profiles\iswuj5mu.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.


Fin du rapport


Could you tell what is mimectl.dll please?

Thanks for your help,

David


Report Offensive Follow Up For Removal

Response Number 5
Name: jabuck
Date: March 13, 2007 at 03:43:32 Pacific
Reply: (edit)

Usually an adserver when running from downloaded program files. How is the computer operating now?


Report Offensive Follow Up For Removal


Response Number 6
Name: fluo
Date: March 13, 2007 at 11:10:43 Pacific
Reply: (edit)

It is working fine, thanks a lot!!

Kindest Regards,

David


Report Offensive Follow Up For Removal

Response Number 7
Name: jabuck
Date: March 13, 2007 at 15:30:57 Pacific
Reply: (edit)

Glad we could help.


Report Offensive Follow Up For Removal






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge
Poll History




Data Recovery Software