Win32:Adware-gen. [Adw] et Win32:Trojano-2873 Fermé

Question

bonjour je rencontre des problèmes avec Win32:Adware-gen. [Adw] et Win32:Trojano-2873 et je n'arrive pas m'en débarasser si quelqu'un peut me filer un tuyau..merci

boulepate · Answer

Salut,télécharge hijackthis: http://www.hijackthis.de/downloads/hijackthis_199.zip Installe le dans son propre dossier:Par exemple C:\hijackthis Lance le, clique sur "do a system scan and save logfile" Puis copie et colle le rapport ici.A++

donjeo · Answer

Logfile of HijackThis v1.99.1Scan saved at 18:04:16, on 03/02/2006Platform: Windows XP  (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXEC:\Apps\ActivBoard\MMKeybd.exeC:\WINDOWS\System32\Isass.exeC:\allow.exeC:\winsysban5.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\MSN Messenger\MsnMsgr.ExeC:\Apps\ActivBoard\TrayMon.exeC:\Apps\ActivBoard\OSD.exeC:\Apps\ActivBoard
hksrv.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Network Monitor
etmon.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\system32\slserv.exeC:\Program Files\Virtual CD v4 SDK\system\vcssecs.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Internet Explorer\iexplore.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Microsoft Money\System\urlmap.exeC:\Documents and Settings\jeoffrey\Local Settings\Temp\Répertoire temporaire 1 pour hijackthis_199[1].zip\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.comR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.comR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.comR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.comR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.comR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO1 - Hosts: 213.21.215.158 www.halifax-online.co.ukO1 - Hosts: 213.21.215.158 ibank.barclays.co.ukO1 - Hosts: 213.21.215.158 online.lloydstsb.co.ukO1 - Hosts: 213.21.215.158 online-business.lloydstsb.co.ukO1 - Hosts: 213.21.215.158 www.ukpersonal.hsbc.co.ukO1 - Hosts: 213.21.215.158 banesnet.banesto.esO1 - Hosts: 213.21.215.158 extranet.banesto.esO1 - Hosts: 213.21.215.158 ebanking.bccbrescia.itO1 - Hosts: 213.21.215.158 www.bankofscotlandhalifax-online.co.ukO1 - Hosts: 213.21.215.158 oi.cajamadrid.esO1 - Hosts: 213.21.215.158 bancae.caixapenedes.comO1 - Hosts: 213.21.215.158 banking.postbank.deO1 - Hosts: 213.21.215.158 meine.deutsche-bank.deO1 - Hosts: 213.21.215.158 myonlineaccounts2.abbeynational.co.ukO1 - Hosts: 213.21.215.158 ibank.cahoot.comO1 - Hosts: 213.21.215.158 webbank.openplan.co.ukO1 - Hosts: 213.21.215.158 bancopostaonline.poste.itO1 - Hosts: 213.21.215.158 mybank.bybank.itO1 - Hosts: 213.21.215.158 ibank.internationalbanking.barclays.comO1 - Hosts: 213.21.215.158 welcome7.co-operativebank.co.ukO1 - Hosts: 213.21.215.158 welcome11.co-operativebankonline.co.ukO2 - BHO: Surfairy - {BB9AAAF3-4F8D-48B5-A565-FF3E58433DC2} - C:\Program Files\Surfairy\SurfairyHlp.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: UCmore XP - The Search Accelerator - {44BE0690-5429-47f0-85BB-3FFD8020233E} - C:\Program Files\TheSearchAccelerator\UCMTSAIE.dllO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installquietO4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXEO4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exeO4 - HKLM\..\Run: [Local Security Authority Service] C:\WINDOWS\System32\Isass.exeO4 - HKLM\..\Run: [ihost.exe] C:\allow.exeO4 - HKLM\..\Run: [winsysupd] C:\windows\winsysupd5.exeO4 - HKLM\..\Run: [winsysban] C:\winsysban5.exeO4 - HKLM\..\Run: [gimmygames] c:\gimmygames.exeO4 - HKLM\..\Run: [Microsoft IIS] C:\WINDOWS\system32\syshost.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [JeticoPFStartup] "C:\Program Files\Jetico\Jetico Personal Firewall\fwsrv.exe"O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htmO9 - Extra button: Suggestions - {2223664C-1942-4276-9A2D-E8D8F547C5D2} - res://EffiPeled (file missing)O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htmO9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htmO9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dllO9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{88CF6A94-E692-481D-B1C7-D302CF9F83B5}: NameServer = 86.64.145.144 86.64.145.154O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\amVvZmZyZXk\command.exe (file missing)O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor
etmon.exeO23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard
hksrv.exeO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: Service Hosts (ServiceHost) - Unknown owner - C:\WINDOWS\shost.exe (file missing)O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exeO23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

Kristopher · Answer

Salut,Il fallait rester sur ton poste d'origine : https://forums.commentcamarche.net/forum/affich-2075994-re-win32-adware-gen-adw-et-win32-trojano1/ Télécharge, mets à jour et scannes ton PC avec Ad-Aware et SpyBot Search & Destroy :- Ad-Aware SE Personal: Ad-aware - SpyBot - Search & Destroy: Spybot Search & Destroy2/ Télécharge et scanne ton PC avec Ewido Security Suite : https://www.01net.com/telecharger/   Copie/colle le rapport sur le forum.++

Win32:Adware-gen. [Adw] et Win32:Trojano-2873

3 réponses

Discussions similaires