Sujet Précédent Sujet Suivant

Supprimer Spyware.SpyArsenalLog

Résolu/Fermé
qenqen79100 Messages postés 352 Date d'inscription mardi 12 août 2008 Statut Membre Dernière intervention 2 mars 2013 - 29 oct. 2009 à 12:05
qenqen79100 Messages postés 352 Date d'inscription mardi 12 août 2008 Statut Membre Dernière intervention 2 mars 2013 - 29 oct. 2009 à 15:14
Bonjour,je suis infecter par un Spyware.SpyArsenalLog malgrer les différente analyse avec Arovax, Malwarebytes' et spybot.
Alors comment supprimer Spyware.SpyArsenalLog.
Merci.
A voir également:

29 réponses

Précédent
  • 1
  • 2
Réponse 21 / 29
qenqen79100 Messages postés 352 Date d'inscription mardi 12 août 2008 Statut Membre Dernière intervention 2 mars 2013 25
29 oct. 2009 à 14:23
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Service mbr stopped successfully.
Service mbr deleted successfully.
========== FILES ==========
File/Folder C:\WINDOWS\system32\rqRIaYqP not found.
C:\Kill'em\agi.Kill'em\config moved successfully.
C:\Kill'em\agi.Kill'em\AGI\tmp moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\xml\sax moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\xml\parsers moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\xml\etree moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\xml\dom moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\xml moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\logging moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\hotshot moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\encodings moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\email\mime moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\email moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\ctypes moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib\compiler moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\Lib moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25\DLLs moved successfully.
C:\Kill'em\agi.Kill'em\AGI\Python25 moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32comext\shell moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32comext\axcontrol moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32comext\authorization moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32comext\adsi moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32comext moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32com\server moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32com\client moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32com moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32\scripts moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32\lib moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\win32 moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore\search\provider moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore\search\algorithm moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore\search moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore\protection moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore\process moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore\lilw moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore\install\installers moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore\install\dependency moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore\install moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore\config moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\pyagcore moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\dateutil\zoneinfo moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\dateutil moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\comtypes\tools moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\comtypes\server moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\comtypes\gen moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\comtypes\client moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common\comtypes moved successfully.
C:\Kill'em\agi.Kill'em\AGI\common moved successfully.
C:\Kill'em\agi.Kill'em\AGI moved successfully.
C:\Kill'em\agi.Kill'em moved successfully.
C:\Kill'em moved successfully.
C:\Kill'em.txt moved successfully.
C:\ZHPExportRegistry-29.10.2009-12-31-02.txt moved successfully.
C:\lopR.txt moved successfully.
C:\Documents and Settings\Quentin\Application Data\G-Force Prefs (WindowsMediaPlayer).txt moved successfully.
C:\Program Files\Panda Security moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Quentin\LOCALS~1\Temp\GoogleQuickSearchBox.log scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Quentin\LOCALS~1\Temp\~DFA66.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_2f8.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Opera cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.0 log created on 10292009_141150

Files moved on Reboot...
C:\DOCUME~1\Quentin\LOCALS~1\Temp\GoogleQuickSearchBox.log moved successfully.
C:\DOCUME~1\Quentin\LOCALS~1\Temp\~DFA66.tmp moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_2f8.dat moved successfully.
C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\Quentin\Local Settings\Application Data\Mozilla\Firefox\Profiles\6xcms2s0.default\XUL.mfl moved successfully.
0
Réponse 22 / 29
qenqen79100 Messages postés 352 Date d'inscription mardi 12 août 2008 Statut Membre Dernière intervention 2 mars 2013 25
29 oct. 2009 à 14:40
tt Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:39:11, on 29.10.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Google\Update\1.2.183.7\GoogleCrashHandler.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Arovax AntiSpyware\arovaxantispyware.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\arservice.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Documents and Settings\Quentin\Local Settings\Application Data\Google\Update\1.2.183.7\GoogleCrashHandler.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\2\FTCOMModule.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60347
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tinit.org/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60347
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Arovax AntiSpyware] "C:\Program Files\Arovax AntiSpyware\arovaxantispyware.exe" /s
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Quentin\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.79\AMVConverter\grab.html
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\DOCUME~1\Quentin\LOCALS~1\Temp\cceBB.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_674125AABFE11C21.dll/cmsidewiki.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 3.79\MediaManager\grab.html
O8 - Extra context menu item: traduire la page - C:\DOCUME~1\Quentin\LOCALS~1\Temp\cceB9.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Update Service (gupdate1c98c4ce11c608a) (gupdate1c98c4ce11c608a) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
0
Réponse 23 / 29
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
29 oct. 2009 à 14:41
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\DOCUME~1\Quentin\LOCALS~1\Temp\cceBB.html
O8 - Extra context menu item: traduire la page - C:\DOCUME~1\Quentin\LOCALS~1\Temp\cceB9.html


-----> Fixe ces deux lignes avec hijackthis.

Comment se porte le PC ? si tu n'as plus de soucis on va passer au nettoyage.
0
Réponse 24 / 29
qenqen79100 Messages postés 352 Date d'inscription mardi 12 août 2008 Statut Membre Dernière intervention 2 mars 2013 25
29 oct. 2009 à 14:44
oui
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 25 / 29
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
29 oct. 2009 à 14:47
1 - Nettoyage :

- Télécharge ATF-Cleaner

- Suis le tutoriel disponible à cette adresse

- Renouvelle l'opération régulièrement

-----------------

-+-+-+-> Tools Cleaner <-+-+-+-


[o] Afin de supprimer tout les logiciels qui ont été utilisés pour ta désinfection,

[o] Télécharge ToolsCleaner sur ton bureau à cette adresse : https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/

[o] Double-clique sur « Toolscleaner.exe »

[o] Clique sur "restauration" pour créer un point de restauration.

[o] Puis clique sur « recherche »

[o] Quand la recherche sera terminée, clique sur "suppression".

[o] A la fin (il y aura des indications dans le cadre en-dessous), clique sur "quitter" et poste le rapport qui se trouve dans C:\Tcleaner.txt
0
Réponse 26 / 29
qenqen79100 Messages postés 352 Date d'inscription mardi 12 août 2008 Statut Membre Dernière intervention 2 mars 2013 25
29 oct. 2009 à 14:59
[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Lop SD: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Quentin\Bureau\HijackThis.lnk: trouvé !
C:\Lop SD\catchme.exe: trouvé !
C:\Lop SD\catchme.log: trouvé !
C:\Program Files\Trend Micro\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\hijackthis.log: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\_OTMoveIt\MovedFiles\10292009_141150\lopR.txt: trouvé !

---------------------------------
--> Suppression:

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Quentin\Bureau\HijackThis.lnk: supprimé !
C:\Lop SD\catchme.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Lop SD\catchme.log: supprimé !
C:\Program Files\Trend Micro\hijackthis.log: supprimé !
C:\_OTMoveIt\MovedFiles\10292009_141150\lopR.txt: supprimé !
C:\Lop SD: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
0
Réponse 27 / 29
qenqen79100 Messages postés 352 Date d'inscription mardi 12 août 2008 Statut Membre Dernière intervention 2 mars 2013 25
29 oct. 2009 à 15:00
après c bon
0
Réponse 28 / 29
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
29 oct. 2009 à 15:08
Tu peux supprimer toolscleaner et mettre ton post en résolu une fois que tu auras fais ceci :

-+-+-+-> Purger la restauration système <-+-+-+-


- Lors d'une désinfection, il est important de purger la restauration système car des fichiers infectés risquent de s'y trouver,
et lorsque tu effectueras une restauration système, le PC sera de nouveau infecté.

- Nous allons purger la restauration du système :


XP : https://support.microsoft.com/en-us/help/310405

Vista : https://www.commentcamarche.net/faq/13214-vista-desactiver-reactiver-la-restauration-systeme-de-vista


======================================================================

Egalement un peu de lecture :

-+-+-+-> Sécuriser son PC <-+-+-+-

I - Attitude sur le net


- Sécuriser son PC, c'est tout d'abord être responsable.

1-> Les sites de cracks sont à bannir ( Plus d'infos ici : https://forum.malekal.com/viewtopic.php?f=33&t=893 )

2-> Le P2P est également à éviter, source de nombreuses infections. ( Bagle par ex.) ( Plus d'infos ici : http://www.libellules.ch/... )

3-> Il est aussi très important de faire toutes les mises à jour de windows, qui sont nécessaire pour corriger les failles. ( IE, Mises à jour critiques, Service Pack etc.. ) ( Pourquoi mettre à jour son système : http://forum.malekal.com/ftopic3563.php )

4-> Adobe flash player, Java , et acrobat reader sont également à mettre à jour, pour éviter les exploits ( https://forum.malekal.com/viewtopic.php?f=33&t=13629 )

============================================================================================

II - Logiciels de protection


- Il faut ensuite avoir un bon antivirus, je recommande antivir qui est l'un de meilleur antivirus gratuit à ce jour ( et qui plus est en français ) :

Pour le télécharger --> http://www.commentcamarche.net/telecharger/telecharger-55-antivir

- Un bon pare-feu est aussi de rigueur, je recommande Comodo ( gratuit ) ou ZoneAlarm ( payant )

Comodo : https://www.commentcamarche.net/telecharger/securite/6291-comodo-firewall-free-windows/

ZoneAlarm : https://www.commentcamarche.net/telecharger/securite/24863-zonealarm/

- Pour complèter le tout, un anti-spyware est recommandé.

Malwarebyte's : https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

SpywareTerminator ( Protection en temps réel ) : https://www.commentcamarche.net/telecharger/securite/20947-spyware-terminator/

============================================================================================

III - Liens utiles


-> Malekal - Sécuriser son PC : https://www.malekal.com/proteger-pc-virus-pirates/

-> Malekal - Les spywares/vers/malwares sous windows : http://www.malekal.com/spywares.php

-> Malekal - Les toolbars : https://forum.malekal.com/viewtopic.php?t=6173&start=
0
Réponse 29 / 29
qenqen79100 Messages postés 352 Date d'inscription mardi 12 août 2008 Statut Membre Dernière intervention 2 mars 2013 25
29 oct. 2009 à 15:14
oki bes c bon pui bes merci a toi
0