S o s virus

Bonjour,
besoin d'aide svp,merci
Configuration: Windows Vista
Internet Explorer 7.0

11 réponses

  • Votes
  • Date
  • Date décroissante
  1. Contributeur
    bonjour expose ton probleme avec beaucoup plus de detail sinon on ne pourra pas t'aider
    1. Sans plus de précision, çà va être super compliqué de vous aider.

      C'est un peu comme téléphoner au médecin et lui dire "Je suis malade, je dois prendre quoi ?" :)
      1. en fait je pense avoir d virus
        et kan je met lanti virus en route(avg)a la fin mon ordi seteint et me demande de rallumer mon ordi soi san echec ou normal.....ke doi je faire
        1. Téélécharger HijackThis et donnez nous le rapport que vous obtenez
          1. Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 20:26:07, on 30/03/2009
            Platform: Windows Vista SP1 (WinNT 6.00.1905)
            MSIE: Internet Explorer v7.00 (7.00.6001.18000)
            Boot mode: Normal

            Running processes:
            C:\windows\system32\taskeng.exe
            C:\windows\system32\Dwm.exe
            C:\windows\Explorer.EXE
            c:\Program Files\Hewlett-Packard\IAM\Bin\AsGHost.exe
            C:\Program Files\Windows Defender\MSASCui.exe
            C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
            C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe
            C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
            C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
            C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe
            C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
            C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
            C:\Program Files\Analog Devices\Core\smax4pnp.exe
            C:\Program Files\AVG\AVG8\avgtray.exe
            C:\Program Files\Java\jre6\bin\jusched.exe
            C:\Program Files\Windows Sidebar\sidebar.exe
            C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
            C:\Program Files\Windows Live\Messenger\msnmsgr.exe
            C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
            C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
            c:\Program Files\ActivIdentity\ActivClient\acevents.exe
            C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
            C:\Program Files\Windows Sidebar\sidebar.exe
            c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
            C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
            C:\windows\system32\wbem\unsecapp.exe
            C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
            C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
            C:\Program Files\Java\jre6\bin\jucheck.exe
            C:\Program Files\Windows Live\Contacts\wlcomm.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
            C:\windows\system32\SearchFilterHost.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
            O1 - Hosts: ::1 localhost
            O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
            O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files\Hewlett-Packard\File Sanitizer\IEBHO.dll
            O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
            O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
            O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
            O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
            O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
            O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
            O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
            O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
            O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll
            O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
            O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
            O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
            O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
            O4 - HKLM\..\Run: [StartCCC] "c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
            O4 - HKLM\..\Run: [accrdsub] "c:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"
            O4 - HKLM\..\Run: [PTHOSTTR] c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
            O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe c:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
            O4 - HKLM\..\Run: [PDF Complete] C:\Program Files\PDF Complete\pdfsty.exe
            O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
            O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
            O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
            O4 - HKLM\..\Run: [File Sanitizer] C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe
            O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
            O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
            O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
            O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray
            O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
            O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
            O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
            O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
            O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
            O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
            O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
            O4 - Global Startup: BTTray.lnk = ?
            O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
            O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
            O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
            O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
            O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
            O13 - Gopher Prefix:
            O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
            O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
            O20 - AppInit_DLLs: APSHook.dll,avgrsstx.dll
            O23 - Service: McAfee Application Installer Cleanup (0305021226599553) (0305021226599553mcinstcleanup) - Unknown owner - C:\Users\NOUSDE~1\AppData\Local\Temp\030502~1.EXE (file missing)
            O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
            O23 - Service: ActivClient Middleware Service (accoca) - ActivIdentity - c:\Program Files\ActivIdentity\ActivClient\accoca.exe
            O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\windows\system32\AEADISRV.EXE
            O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
            O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
            O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
            O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
            O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
            O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
            O23 - Service: HP ProtectTools Service - Hewlett-Packard Development Company, L.P - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe
            O23 - Service: Drive Encryption Service (HpFkCryptService) - SafeBoot International - c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
            O23 - Service: File Sanitizer for HP ProtectTools (HPFSService) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\File Sanitizer\HPFSService.exe
            O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
            O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\windows\system32\Hpservice.exe
            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
            O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
            O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
            O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
            O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) - Absolute Software Corp. - C:\windows\system32\rpcnet.exe
            1. alor sa donne koi???
              1. Eh Oh, c'est du bénévolat ici, faut pas être pressé comme çà :)
            2. Windows Processus - SoundMAX.exe Attention - Nocif processus

              Attention - Nocif processus!

              Avertissement: Cette fenêtre processus est lié des programmes malveillants tels que des virus, des logiciels espions, les logiciels publicitaires, chevaux de Troie et les vers. Il est fortement recommandé de supprimer ou d'arrêter ce processus s'exécutant sur votre ordinateur!

              Essai avec l'Antivirus "Avira Antivirus" (gratuit et efficace)
              1. Avira AntiVir Personal - Free Antivirus
                *************************************

                Copyright © 2009 Avira GmbH.
                All rights reserved.

                Contents
                ******

                0 Important information
                1 System requirements
                2 Important requirements for installation
                3 Support service
                4 Contact address

                0 Important information
                **********************

                When attempting to update, users who have a previously installed ANSI
                version of the Avira AntiVir Personal software package on a Microsoft
                Windows 2000 or Microsoft Windows XP operating system receive an
                update message.

                To perform an update, proceed as follows:

                1. Uninstall the installed version of Avira AntiVir Personal.
                2. Download an up-to-date software package from the download area of
                the Avira AntiVir Personal website at https://www.avira.com/
                3. Install this software package on your computer.

                1 System requirements
                ***********************

                For Avira AntiVir Personal to work perfectly, the computer system
                must fulfil the following requirements:

                - Computer as from Pentium, at least 266 MHz

                - Operating system
                - Windows 2000, SP4 and update rollup 1 or
                - Windows XP, SP2 (32 or 64 Bit) or
                - Windows Vista (32 or 64 Bit, SP 1 recommended)

                Program interface displays may differ depending on the operating
                system.

                - At least 100 MB of free hard disk memory space (more if using
                Quarantine for temporary storage)

                - At least 192 MB RAM under Windows 2000/XP

                - At least 512 MB RAM under Windows Vista

                - For installation: Administrator rights

                - For all installations: Windows Internet Explorer 6.0 or higher

                2 Important requirements for installation
                ************************************************

                For Avira AntiVir Personal to function perfectly on your computer,
                ensure that the following requirements are satisfied:

                - System requirements are fulfilled
                - No other virus guards are installed (On-Access Scanner, Guard).
                - You have administrator rights
                - Internet and/or intranet connection is available
                - All programs running on your computer have been terminated

                3 Support service
                *****************

                All necessary information on our comprehensive support service can be
                obtained from our website at http://www.avira.com/classic-support.
                Experts are available to answer your questions and provide further
                help with technical problems.

                4 Contact address
                ****************

                If you have any questions or requests concerning the Avira AntiVir
                Personal product range, we will be pleased to help. Our contact
                addresses can be found on the internet at:

                https://www.avira.com/en/contact