Fenêtre intempestive "Your computer is infect Résolu/Fermé

Question

Bonjour j'ai depuis peu une fenêtre intempestive"Your computer is infected!" qui s'affiche sur ma barre d'outil.Pourriez vous m'aidez s'il vous plait.Voici le log que j'ai fait.Logfile of HijackThis v1.99.1Scan saved at 22:40:34, on 19/11/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEc:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exeC:\WINDOWS\system32\mssearchnet.exeC:\WINDOWS\system32
vctrl.exeC:\WINDOWS\ATK0100\Hcontrol.exeC:\WINDOWS\SOUNDMAN.EXEC:\Progra~1\ASUS\Power4 Gear\BatteryLife.exeC:\Progra~1\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exeC:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exeC:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exeC:\Program Files\ASUS\WLAN Card Utilities\Center.exeC:\Program Files\Microsoft AntiSpyware\gcasServ.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\Java\jre1.5.0_05\bin\jusched.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\Trend Micro\PC-cillin 2002\WebTrap.EXEC:\Program Files\Winamp\winampa.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\System32\j?vaw.exeC:\Program Filessie\esmd.exeC:\Program Files\Asus\Asus ChkMail\ChkMail.exeC:\Program Files\Asus\ASUS Hotkey\Hotkey.exeC:\Program Files\WinZip\WZQKPICK.EXEC:\WINDOWS\ATK0100\ATKOSD.exeC:\Program Files\Microsoft AntiSpyware\gcasDtServ.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Hijackthis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)O2 - BHO: HomepageBHO - {7caf96a2-c556-460a-988e-76fc7895d284} - C:\WINDOWS\system32\hp78D9.tmpO4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exeO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [Power_Gear] C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe 1O4 - HKLM\..\Run: [ATIPTA] C:\Progra~1\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exeO4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exeO4 - HKLM\..\Run: [pccguide.exe] "c:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe"O4 - HKLM\..\Run: [PCCClient.exe] "c:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe"O4 - HKLM\..\Run: [Pop3trap.exe] "c:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe"O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exeO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [regedit] autoexe.exeO4 - HKLM\..\Run: [MS WIN] taskplus.exeO4 - HKLM\..\Run: [Windows Desktop Daemon] winpadg.exeO4 - HKLM\..\Run: [Client for Microsoft Networks] msclient32.exeO4 - HKLM\..\Run: [Compaq Service Drivers] wincmd.exeO4 - HKLM\..\Run: [HELPER] C:\WINDOWS\System32	emp532.exe -NO4 - HKLM\..\Run: [MS Auto-IPSec Protection] MSASP32.exeO4 - HKLM\..\Run: [Service] wN2S.exeO4 - HKLM\..\Run: [msmsngr] C:\WINDOWS\System32\msmsngr.exeO4 - HKLM\..\Run: [KYK Control Settings] KYSVCXD.EXEO4 - HKLM\..\Run: [MS UniX] navupdate64.exeO4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exeO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\RunServices: [regedit] autoexe.exeO4 - HKLM\..\RunServices: [MS WIN] taskplus.exeO4 - HKLM\..\RunServices: [Windows Desktop Daemon] winpadg.exeO4 - HKLM\..\RunServices: [Client for Microsoft Networks] msclient32.exeO4 - HKLM\..\RunServices: [Compaq Service Drivers] wincmd.exeO4 - HKLM\..\RunServices: [MS Auto-IPSec Protection] MSASP32.exeO4 - HKLM\..\RunServices: [Service] wN2S.exeO4 - HKLM\..\RunServices: [KYK Control Settings] KYSVCXD.EXEO4 - HKLM\..\RunServices: [MS UniX] navupdate64.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [regedit] autoexe.exeO4 - HKCU\..\Run: [Ddvi] C:\WINDOWS\System32\j?vaw.exeO4 - HKCU\..\Run: [Client for Microsoft Networks] msclient32.exeO4 - HKCU\..\Run: [Compaq Service Drivers] wincmd.exeO4 - HKCU\..\Run: [MS Auto-IPSec Protection] MSASP32.exeO4 - HKCU\..\Run: [Service] wN2S.exeO4 - HKCU\..\Run: [KYK Control Settings] KYSVCXD.EXEO4 - HKCU\..\Run: [MS UniX] navupdate64.exeO4 - HKCU\..\Run: [Sra] "C:\Program Filessie\esmd.exe" -vt ndrvO4 - HKCU\..\RunServices: [Compaq Service Drivers] wincmd.exeO4 - HKCU\..\RunServices: [Service] wN2S.exeO4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exeO4 - Global Startup: Hotkey.lnk = C:\Program Files\Asus\ASUS Hotkey\Hotkey.exeO4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXEO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin
pjpi150_05.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin
pjpi150_05.dllO9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {00000000-0000-0000-0000-000020030000} - http://www.advnt01.com/dialer/fra_pagl.exeO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{1D982EE5-BFA0-48F5-9004-17B7C2F45C3C}: NameServer = 80.118.192.111 80.118.196.41O17 - HKLM\System\CS1\Services\Tcpip\..\{1D982EE5-BFA0-48F5-9004-17B7C2F45C3C}: NameServer = 80.118.192.111 80.118.196.41O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O23 - Service: AOL Instant Messanger (AIM) - Unknown owner - C:\WINDOWS\aim.exe (file missing)O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: Mouse Hardware Sync (mousehs) - Unknown owner - C:\WINDOWS\System32\mousehs.exe (file missing)O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - c:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exeO23 - Service: Remote Procedure Call (RPC) Client (RpcClient) - Unknown owner - C:\WINDOWS\System32pcclient.exe (file missing)O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exeO23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - c:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exeMerci d'avance pour votre aide à tous.

Kerho · Accepted Answer

Merci pour ton aide

zzazaaaz · Answer

D'après le site de http://www.hijackthis.de/fr , tu peux fixer les éléments suivant:C:\WINDOWS\system32\mssearchnet.exeC:\WINDOWS\system32
vctrl.exeR3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)O4 - HKLM\..\Run: [MS UniX] navupdate64.exeO4 - HKLM\..\RunServices: [MS UniX] navupdate64.exeO4 - HKCU\..\Run: [MS UniX] navupdate64.exeO16 - DPF: {00000000-0000-0000-0000-000020030000} - http://www.advnt01.com/dialer/fra_pagl.exe

Yoan · Answer

Salut, c'est le vrai boxon dans ton ordinateur ;) Fix tout ça aussi :O4 - HKCU\..\Run: [Ddvi] C:\WINDOWS\System32\j?vaw.exeO4 - HKCU\..\RunServices: [Service] wN2S.exeO4 - HKCU\..\Run: [KYK Control Settings] KYSVCXD.EXEO4 - HKCU\..\RunServices: [Compaq Service Drivers] wincmd.exeO4 - HKCU\..\Run: [regedit] autoexe.exeO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O4 - HKCU\..\Run: [MS Auto-IPSec Protection] MSASP32.exeO4 - HKLM\..\RunServices: [MS WIN] taskplus.exe Et ceci uniquement si tu ne connais pas ces adresses (IP, DNS, DHCP...) :O17 - HKLM\System\CCS\Services\Tcpip\..\{1D982EE5-BFA0-48F5-9004-17B7C2F45C3C}: NameServer = 80.118.192.111 80.118.196.41O17 - HKLM\System\CS1\Services\Tcpip\..\{1D982EE5-BFA0-48F5-9004-17B7C2F45C3C}: NameServer = 80.118.192.111 80.118.196.41Redémarre, installe Cleanup et termine de nettoyer.

Fenêtre intempestive "Your computer is infect

3 réponses

Discussions similaires