| |||||
| Dernière réponse | |
|---|---|
| Sujet : [adware] résultats à examiner : venez-tous ! | |
| antp | puis tous ces programmes résidents-espions, on s'etonne que Windows soit pas stable ou que du jour au lendemain le DNS ne marche plus (vive Webhancer, ce spyware de m**** qui modifie Winsock)
perso je dirais que tout ce que propose Ad-Aware on peut le virer sans risques... dans le pire des cas il faudra réinstaller le programme qui ne fonctionne plus, s'il y en a |
| Aperçu |
|---|
| Vue Rapide de la discussion |
|---|
| antp | puis tous ces programmes résidents-espions, on s'etonne que Windows soit pas stable ou que du jour au lendemain le DNS ne marche plus (vive Webhancer, ce spyware de m**** qui modifie Winsock)
perso je dirais que tout ce que propose Ad-Aware on peut le virer sans risques... dans le pire des cas il faudra réinstaller le programme qui ne fonctionne plus, s'il y en a |
| muzah | en fait, ce n'est pas tant la ram que les ressources système : j'ai pas un athlon 1500+ et comme tu le dis si bien, les OS pompent deja assez comme ça ... |
| Kyle_Katarn |
|
| muzah |
je ne suis pas parano, c'est pas le fait d'envoyer des trucs, je m'en fout, mais le fait que gator soit chargé en RAM, j'ai pas que ça à foutre, ma RAM est comme pour tout : c'est compté à l'octet près :D
|
| _2K_ |
|
| Koybe | Vous etes tous parano? on s'en fou de ces trucs.... |
| muzah | faut-il tout supprimer comme le propose adware ? |
| muzah | voici un log de adware que je viens de lancer, examinons ça ensemble pour rigoler et parler des spy et autres conneries :)
log adware Scan initialized on 06/03/2002 18:54:51. (AAW release 5.62, referencefile 041-02.02.2002) ================================================= Started memory scan ==================== Running processes: #:1 (smss.exe) Path:\SystemRoot\System32\ ThreadCreationTime:06/03/2002 15:54:57 BasePriority :Normal #:2 (winlogon.exe) Path:\??\C:\WINDOWS\system32\ ThreadCreationTime:06/03/2002 15:55:14 BasePriority :High #:3 (services.exe) Path:C:\WINDOWS\system32\ ThreadCreationTime:06/03/2002 15:55:15 BasePriority :Normal #:4 (lsass.exe) Path:C:\WINDOWS\system32\ ThreadCreationTime:06/03/2002 15:55:15 BasePriority :Normal #:5 (svchost.exe) Path:C:\WINDOWS\system32\ ThreadCreationTime:06/03/2002 15:55:15 BasePriority :Normal #:6 (svchost.exe) Path:C:\WINDOWS\System32\ ThreadCreationTime:06/03/2002 15:55:16 BasePriority :Normal #:7 (spoolsv.exe) Path:C:\WINDOWS\system32\ ThreadCreationTime:06/03/2002 15:55:16 BasePriority :Normal #:8 (svchost.exe) Path:C:\WINDOWS\System32\ ThreadCreationTime:06/03/2002 15:56:19 BasePriority :Normal #:9 (explorer.exe) Path:C:\WINDOWS\ ThreadCreationTime:06/03/2002 16:04:52 BasePriority :Normal #:10 (cmesys.exe) Path:C:\Program Files\Fichiers communs\CMEII\ ThreadCreationTime:06/03/2002 16:04:54 BasePriority :Normal #:11 (devldr32.exe) Path:C:\WINDOWS\System32\ ThreadCreationTime:06/03/2002 16:04:54 BasePriority :Normal #:12 (gmt.exe) Path:C:\Program Files\Fichiers communs\GMT\ ThreadCreationTime:06/03/2002 16:04:56 BasePriority :Normal Warning! GATOR module loaded: gmt.exe (C:\Program Files\Fichiers communs\GMT\GMT.exe) apperement, je soupçonne gator d'être venu via ICQ : confirmation ? "gmt.exe" unload successfull! #:13 (icq.exe) Path:C:\Program Files\ICQ\ ThreadCreationTime:06/03/2002 16:05:51 BasePriority :Normal #:14 (mozilla.exe) Path:C:\Programmes\Mozilla\ ThreadCreationTime:06/03/2002 16:07:15 BasePriority :Normal #:15 (brsvc01a.exe) Path:C:\WINDOWS\System32\ ThreadCreationTime:06/03/2002 16:30:55 BasePriority :Normal #:16 (brss01a.exe) Path:C:\WINDOWS\System32\ ThreadCreationTime:06/03/2002 16:30:55 BasePriority :Normal #:17 (brqikmon.exe) Path:C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\ ThreadCreationTime:06/03/2002 16:31:50 BasePriority :Normal #:18 (edonkeybot.exe) Path:C:\Programmes\eDonkey\ ThreadCreationTime:06/03/2002 17:33:50 BasePriority :Normal #:19 (easyphp.exe) Path:C:\Programmes\EasyPHP\ ThreadCreationTime:06/03/2002 17:33:55 BasePriority :Normal #:20 (gdonkey.exe) Path:C:\Programmes\eDonkey\ ThreadCreationTime:06/03/2002 17:33:55 BasePriority :Normal #:21 (mysqld-nt.exe) Path:C:\PROGRA~2\EasyPHP\MySql\bin\ ThreadCreationTime:06/03/2002 17:33:56 BasePriority :Normal #:22 (apache.exe) Path:C:\PROGRA~2\EasyPHP\Apache\ ThreadCreationTime:06/03/2002 17:33:56 BasePriority :Normal #:23 (apache.exe) Path:C:\PROGRA~2\EasyPHP\Apache\ ThreadCreationTime:06/03/2002 17:34:00 BasePriority :Normal #:24 (explorer.exe) Path:C:\WINDOWS\ ThreadCreationTime:06/03/2002 17:36:29 BasePriority :High #:25 (ad-aware.exe) Path:C:\Program Files\Lavasoft Ad-aware\ ThreadCreationTime:06/03/2002 17:54:41 BasePriority :Normal Memory scan result: Total modules found:25 Suspicious modules found:1 Started registry scan ====================== Gator key:HKEY_CLASSES_ROOT\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\ Gator key:HKEY_LOCAL_MACHINE\software\gator.com\ Alexa key:HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}\ Other key:HKEY_CLASSES_ROOT\typelib\{08d96de3-a2e6-11d1-ada5-00a0c92c179f}\ Web3000 key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgef Web3000 key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgmg Aureate key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Timesink key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Other key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Other key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Aureate key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Other key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Other key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ CometCursor key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ CometCursor key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Other key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ EverAd key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ EzuLa key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ EzuLa key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Timesink key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Flyswat key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Gator key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Other key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Gator key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Gator key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Gator key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Gratisware key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ HotBar key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Other key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Other key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Gator key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Gator key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ OnFlow key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Aureate key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ SaveNow key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ SurfPlus key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Adware key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Timesink key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ EzuLa key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ WebHancer key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ SaveNow key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Other key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Aureate key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\ Started extended registry scan =============================== Registry scan result: Suspicious keys found :43 Started folder scan ==================== Now processing drive (C), 4 remaining. Gator file:C:\WINDOWS\GatorPdpSetup.log Gator file:C:\WINDOWS\GatorUninstaller_cme.log Gator file:C:\WINDOWS\GatorUninstaller_cme_u.log Gator folder:C:\Program Files\Fichiers communs\GMT Aureate folder:C:\Programmes\Eudora\EudPriv\Ads\AdCache Finished processing Drive(C), 1304 folders total. Now processing drive (D), 3 remaining. Finished processing Drive(D), 1417 folders total. Now processing drive (E), 2 remaining. Finished processing Drive(E), 1424 folders total. Now processing drive (H), 1 remaining. Finished processing Drive(H), 1430 folders total. Now processing drive (I), 0 remaining. Finished processing Drive(I), 1488 folders total. Folder scan result: Folders processed:7063 Suspicious folders found:2 Started file scan ================== Doubleclick file:C:\Documents and Settings\muzah ze user\Cookies\muzah ze user@doubleclick[1].txt Gator file:C:\Program Files\Fichiers communs\GMT\egIEEngine.dll Gator file:C:\Program Files\Fichiers communs\GMT\EGIEProcess.dll Gator file:C:\Program Files\Fichiers communs\GMT\EGNSEngine.dll Gator file:C:\Program Files\Fichiers communs\GMT\Gator.log Gator file:C:\Program Files\Fichiers communs\GMT\Gator.log Gator file:C:\Program Files\Fichiers communs\GMT\GatorRes.dll Gator file:C:\Program Files\Fichiers communs\GMT\GatorRes.dll Gator file:C:\Program Files\Fichiers communs\GMT\GatorStubSetup.exe Gator file:C:\Program Files\Fichiers communs\GMT\GMT.exe Gator file:C:\Program Files\Fichiers communs\GMT\mepcme.dat Gator file:C:\WINDOWS\GatorPdpSetup.log Gator file:C:\WINDOWS\GatorUninstaller_cme.log Gator file:C:\WINDOWS\GatorUninstaller_cme_u.log File scan result: Suspicious files found:17 Scanning finished ================== Suspicious modules found:1 Suspicious keys found :43 Suspicious folders found:2 Suspicious files found:17 ========================== Spyware components ignored:0 Total spyware components found:63 |




