Trojan

aitopro83 -  
Seb09 Messages postés 81 Date d'inscription   Statut Membre Dernière intervention   -
j'ai trojan.downloader.2105
et trojan swizzor sur mon ordi
rien n'est inscrit sur symantec alors qui peu m'aider a m'en débarasser!

2 réponses

  1. Utilisateur anonyme
     
    salut
    ou se situe t il?
    lance ce scan en ligne
    http://www.bitdefender.com/scan/licence.php
    copie colle le rapport

    a+
    0
    1. Seb09 Messages postés 81 Date d'inscription   Statut Membre Dernière intervention   59
       
      Bonjour regis59.
      Je me permets de t'écire de la part de ^^Marie^^ à propos d'un rapport HijackThis que je te joins ci dessous pour un probleme avec msn
      http://www.commentcamarche.net/forum/affich-1457650-%5BMSN%5D-Plantage-msn-7-0-fr


      Logfile of HijackThis v1.99.1
      Scan saved at 11:11:33, on 13/09/2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
      C:\WINDOWS\LTSMMSG.exe
      C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\WINDOWS\System32\ctfmon.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\PROGRA~1\WinZip32\winzip32.exe
      C:\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=ZillaPopupKiller:8100
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O1 - Hosts: 62.75.224.159 www.bns1.net
      O1 - Hosts: 62.75.224.159 www.bns2.net
      O1 - Hosts: 62.75.224.159 www.bns3.net
      O1 - Hosts: 62.75.224.159 www.bns4.net
      O1 - Hosts: 62.75.224.159 www.bns5.net
      O1 - Hosts: 62.75.224.159 www.bns6.net
      O1 - Hosts: 62.75.224.159 www.bns7.net
      O1 - Hosts: 62.75.224.159 www.bns8.net
      O1 - Hosts: 62.75.224.159 www.cms1.net
      O1 - Hosts: 62.75.224.159 www.cms2.net
      O1 - Hosts: 62.75.224.159 www.cms3.net
      O1 - Hosts: 62.75.224.159 www.cms4.net
      O1 - Hosts: 62.75.224.159 www.cms5.net
      O1 - Hosts: 62.75.224.159 www.cms6.net
      O1 - Hosts: 62.75.224.159 www.cms7.net
      O1 - Hosts: 62.75.224.159 www.cms8.net
      O1 - Hosts: 62.75.224.159 www.rg1.com
      O1 - Hosts: 62.75.224.159 www.rg2.com
      O1 - Hosts: 62.75.224.159 www.rg3.com
      O1 - Hosts: 62.75.224.159 www.rg4.com
      O1 - Hosts: 62.75.224.159 www.rg5.com
      O1 - Hosts: 62.75.224.159 www.rg6.com
      O1 - Hosts: 62.75.224.159 www.rg7.com
      O1 - Hosts: 62.75.224.159 www.rg8.com
      O1 - Hosts: 62.75.224.159 www.cjt1.net
      O1 - Hosts: 62.75.224.159 www.rgs1.net
      O1 - Hosts: 62.75.224.159 www.rgs2.net
      O1 - Hosts: 62.75.224.159 www.bns1.net
      O1 - Hosts: 62.75.224.159 www.bns2.net
      O1 - Hosts: 62.75.224.159 www.cms1.net
      O1 - Hosts: 62.75.224.159 www.cms2.net
      O1 - Hosts: 62.75.224.159 bns1.net
      O1 - Hosts: 62.75.224.159 bns2.net
      O1 - Hosts: 62.75.224.159 bns3.net
      O1 - Hosts: 62.75.224.159 bns4.net
      O1 - Hosts: 62.75.224.159 bns5.net
      O1 - Hosts: 62.75.224.159 bns6.net
      O1 - Hosts: 62.75.224.159 bns7.net
      O1 - Hosts: 62.75.224.159 bns8.net
      O1 - Hosts: 62.75.224.159 cms1.net
      O1 - Hosts: 62.75.224.159 cms2.net
      O1 - Hosts: 62.75.224.159 cms3.net
      O1 - Hosts: 62.75.224.159 cms4.net
      O1 - Hosts: 62.75.224.159 cms5.net
      O1 - Hosts: 62.75.224.159 cms6.net
      O1 - Hosts: 62.75.224.159 cms7.net
      O1 - Hosts: 62.75.224.159 cms8.net
      O1 - Hosts: 62.75.224.159 rg1.com
      O1 - Hosts: 62.75.224.159 rg2.com
      O1 - Hosts: 62.75.224.159 rg3.com
      O1 - Hosts: 62.75.224.159 rg4.com
      O1 - Hosts: 62.75.224.159 rg5.com
      O1 - Hosts: 62.75.224.159 rg6.com
      O1 - Hosts: 62.75.224.159 rg7.com
      O1 - Hosts: 62.75.224.159 rg8.com
      O1 - Hosts: 62.75.224.159 cjt1.net
      O1 - Hosts: 62.75.224.159 rgs1.net
      O1 - Hosts: 62.75.224.159 rgs2.net
      O1 - Hosts: 62.75.224.159 bns1.net
      O1 - Hosts: 62.75.224.159 bns2.net
      O1 - Hosts: 62.75.224.159 cms1.net
      O1 - Hosts: 62.75.224.159 cms2.net
      O1 - Hosts: 62.75.224.159 j800banners.cjt1.net
      O1 - Hosts: 62.75.224.159 jadlogix.cjt1.net
      O1 - Hosts: 62.75.224.159 jadtegrity.cjt1.net
      O1 - Hosts: 62.75.224.159 jaimmedia.cjt1.net
      O1 - Hosts: 62.75.224.159 javatar.cjt1.net
      O1 - Hosts: 62.75.224.159 jbeet.cjt1.net
      O1 - Hosts: 62.75.224.159 jbigpops.cjt1.net
      O1 - Hosts: 62.75.224.159 jbouncetek.cjt1.net
      O1 - Hosts: 62.75.224.159 jbravenet.cjt1.net
      O1 - Hosts: 62.75.224.159 jcdcover.cjt1.net
      O1 - Hosts: 62.75.224.159 jclickspring.cjt1.net
      O1 - Hosts: 62.75.224.159 jcollegehumor.cjt1.net
      O1 - Hosts: 62.75.224.159 jdownloadacc.cjt1.net
      O1 - Hosts: 62.75.224.159 jedonkey.cjt1.net
      O1 - Hosts: 62.75.224.159 jeuniverse.cjt1.net
      O1 - Hosts: 62.75.224.159 jhot.cjt1.net
      O1 - Hosts: 62.75.224.159 jicmedia.cjt1.net
      O1 - Hosts: 62.75.224.159 jicq.cjt1.net
      O1 - Hosts: 62.75.224.159 jieplugin.cjt1.net
      O1 - Hosts: 62.75.224.159 jinternetoptimizer.cjt1.net
      O1 - Hosts: 62.75.224.159 jmediabuy1.cjt1.net
      O1 - Hosts: 62.75.224.159 jmediabuyad.cjt1.net
      O1 - Hosts: 62.75.224.159 jmindset.cjt1.net
      O1 - Hosts: 62.75.224.159 jmindsettest.cjt1.net
      O1 - Hosts: 62.75.224.159 jnictech.cjt1.net
      O1 - Hosts: 62.75.224.159 jnova.cjt1.net
      O1 - Hosts: 62.75.224.159 jpiolet.cjt1.net
      O1 - Hosts: 62.75.224.159 jsanboxer.cjt1.net
      O1 - Hosts: 62.75.224.159 jsercee.cjt1.net
      O1 - Hosts: 62.75.224.159 jthedelfin.cjt1.net
      O1 - Hosts: 62.75.224.159 jwarezp2p.cjt1.net
      O1 - Hosts: 62.75.224.159 jwildmedia.cjt1.net
      O1 - Hosts: 62.75.224.159 mediabuy-nic.cjt1.net
      O1 - Hosts: 62.75.224.159 www.m7z.net
      O1 - Hosts: 62.75.224.159 m7z.net
      O1 - Hosts: 62.75.224.159 jcms.cydoor.com
      O1 - Hosts: 62.75.224.159 cydoor.com
      O1 - Hosts: 62.75.224.159 www.cydoor.com
      O1 - Hosts: 62.75.224.159 jnova.cjt1.net
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\System32\BhoECart.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
      O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
      O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
      O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
      O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
      O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
      O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab?plugin=530200
      O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/filesharingctrl.cab
      O16 - DPF: {4F1D0C59-5ECC-4028-87F3-482191D2230F} - http://nettikamera.lasipalatsi.fi/activex/AMC.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1114452173015
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://argus.sunderland.ac.uk/activex/AxisCamControl.cab
      O16 - DPF: {A8482EAF-A1F3-4934-AE3F-56EB195A50BF} (DeskUpdate- Activex Control) - http://support.fujitsu-siemens.de/DeskUpdate/isapi/activex.cab
      O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
      O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      0
  2. Seb09 Messages postés 81 Date d'inscription   Statut Membre Dernière intervention   59
     
    Bonjour,
    j'ai déjà eu ce probleme il venait de messenger plus.Swizzor permettait l'ajout de plusieurs spyware et malwares.Aucun antivirus,scan en ligne ou utilitaires de désinfection (norton,stinger,panda online etc...)n'est venu à bout ce ces cochonneries. Par contre un fois messenger plus désinstallé, tu peux relancer toute l'artillerie et tu en viendra à bout ^^
    Bon courage
    0

Discussions similaires

Aide pour un virus
cerise92700 -
MisteryBean -

41 réponses
Trojan impossible à supprimer!
Gridouu -
Malekal_morte- -

12 réponses
Comment supprimer le virus Trojan
vitsou -
vitsou -

18 réponses
Menace détectée TrojanSMS-PA sur Google Huawei/Android
Outmost -
bazfile -

6 réponses
Que pensez-vous de Trojan Remover ?
patmoss -
DOUBLON -

10 réponses