infecté par win32:tenga

Question

Bonjour j'ai un problème, mon pc est infecté par le virus win32:tenga et je n'arrive pas a l'enlever  avec mon antivirus qui est avast. pouvez vous m'aidez svp. merci

Séb08 · Answer

Slt,Commences par ca :https://www.commentcamarche.net/faq/2490-supprimer-les-adwares-publicites-intempestives-pop-up-etc

gaetan_84 · Answer

toujours pareil, aidez moi je n'en peux plus. j'ai été sur le site d'avast et j'ai vu que win32:tenga nétais pas ds leur base de donnnées virale

^^Marie^^ · Answer

Bonjour,Faudrait que tu COLLES les rapports sur le forum. Il y en a 3.Cela est demandé dans le lien de Séb08.Sinon, les pro ne peuvent pas t'aider...A++

Séb08 · Answer

Exact !Alors lis bien tout ce qui est demandé et appliques les sinon ce n'est même pas la peine ...A+

gaetan_84 · Answer

Voici le rapport de hijackthis :Logfile of HijackThis v1.99.1Scan saved at 15:48:08, on 21/04/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Browser PS2 mouse\mouse32a.exeC:\Program Files\Anti-Blaxx\Anti-Blaxx.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\Messenger\msmsgs.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Multimedia keyboard utility\1.3\KbdAp32A.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\KiddiesBarre\KiddiesBarre.exeC:\Program Files\ewido anti-malware\SecuritySuite.exeC:\Documents and Settings\hijackthis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blankR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blankR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [FLMBROWSEMOUSE] C:\Program Files\Browser PS2 mouse\mouse32a.exeO4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Multimedia keyboard utility\1.3\MMKEYBD.EXEO4 - HKLM\..\Run: [K!IR.exe] C:\Program Files\K!TV\K!IR.exeO4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\Anti-Blaxx\Anti-Blaxx.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exeO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /wO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO4 - Global Startup: TV Remote Control.lnk = C:\Program Files\ADS Tech\Instant TV Remote\ADSRMT.exeO8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.htmlO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cabO16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon777.free.fr/plugins/hardwaredetection.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cabO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - Winlogon Notify: winbfi32 - winbfi32.dll (file missing)O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeVoici le rapport de ewido :--------------------------------------------------------- ewido anti-malware - Rapport de scan--------------------------------------------------------- + Créé le:		17:23:11, 21/04/2006 + Somme de contrôle:	F2EFD9D9 + Résultats du scan:	C:\Documents and Settings\gaetan\Cookies\gaetan@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@adtech[2].txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@advertising[1].txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@com[1].txt -> TrackingCookie.Com : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@counter11.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@counter12.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@counter14.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@counter4.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@counter9.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@cz4.clickzs[2].txt -> TrackingCookie.Clickzs : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@epilot[1].txt -> TrackingCookie.Epilot : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@estat[1].txt -> TrackingCookie.Estat : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@ilead.itrack[1].txt -> TrackingCookie.Itrack : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@image.masterstats[1].txt -> TrackingCookie.Masterstats : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@lsfnetwork.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@paycounter[1].txt -> TrackingCookie.Paycounter : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@sextracker[2].txt -> TrackingCookie.Sextracker : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@sonymediasoftware.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@valueclick[2].txt -> TrackingCookie.Valueclick : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@weborama[1].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Nettoyer et sauvegarder	C:\Documents and Settings\gaetan\Cookies\gaetan@yadro[2].txt -> TrackingCookie.Yadro : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@advertising[1].txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@promo.casinotropez[1].txt -> TrackingCookie.Casinotropez : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@sel.as-eu.falkag[1].txt -> TrackingCookie.Falkag : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@valueclick[2].txt -> TrackingCookie.Valueclick : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@weborama[2].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder	C:\Documents and Settings\papa\Cookies\papa@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder	C:\Documents and Settings\pressing\Cookies\pressing@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder	C:\Documents and Settings\pressing\Cookies\pressing@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings\pressing\Cookies\pressing@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder::Fin du rapportvoici le scan de bitdefender :BitDefender Online Scanner	 	 Scan report generated at: Fri, Apr 21, 2006 - 17:59:33 	 	 Scan path: A:\;C:\;D:\;	 	  	 	 StatisticsTime	02:12:03Files	407431Folders	3579Boot Sectors	2Archives	2604Packed Files	30185	 	 ResultsIdentified Viruses 	5Infected Files 	10Suspect Files 	0Warnings	0Disinfected	0Deleted Files	10	 	 Engines InfoVirus Definitions	371154Engine build	AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29)Scan plugins	13Archive plugins	39Unpack plugins	4E-mail plugins	6System plugins	1	 	 Scan SettingsFirst Action	DisinfectSecond Action	DeleteHeuristics	YesEnable Warnings	YesScanned Extensions	*;Exclude Extensions	 Scan Emails	YesScan Archives	YesScan Packed	YesScan Files	YesScan Boot	Yes	 	   Scanned File	 StatusC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP110\A0015197.dll	Infected with: Trojan.Fakealert.AHC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP110\A0015197.dll	Disinfection failedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP110\A0015197.dll	DeletedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP110\A0015199.exe	Infected with: Dropped:Trojan.Downloader.Zlob.HRC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP110\A0015199.exe	Disinfection failedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP110\A0015199.exe	DeletedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP120\A0017183.exe	Infected with: Trojan.Downloader.Purityscan.BTC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP120\A0017183.exe	Disinfection failedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP120\A0017183.exe	DeletedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP120\A0017184.dll	Detected with: Adware.180Solutions.2.3C:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP120\A0017184.dll	Disinfection failedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP120\A0017184.dll	DeletedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP122\A0017455.dll	Infected with: Backdoor.Ircbot.NWC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP122\A0017455.dll	Disinfection failedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP122\A0017455.dll	DeletedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP123\A0017478.dll	Infected with: Backdoor.Ircbot.NWC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP123\A0017478.dll	Disinfection failedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP123\A0017478.dll	DeletedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP124\A0017503.dll	Infected with: Backdoor.Ircbot.NWC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP124\A0017503.dll	Disinfection failedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP124\A0017503.dll	DeletedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP94\A0008522.exe	Infected with: Dropped:Trojan.Downloader.Zlob.HRC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP94\A0008522.exe	Disinfection failedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP94\A0008522.exe	DeletedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP94\A0008524.exe	Infected with: Trojan.Downloader.Purityscan.BTC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP94\A0008524.exe	Disinfection failedC:\System Volume Information\_restore{8E9B4F7B-9A02-48BB-A0F5-1629EC7D9E91}\RP94\A0008524.exe	DeletedC:\WINDOWS\system32
etf.dll	Infected with: Backdoor.Ircbot.NWC:\WINDOWS\system32
etf.dll	Disinfection failedC:\WINDOWS\system32
etf.dll	Deleted

gaetan_84 · Answer

voila j'ai coller les rapport aidez-moi svp. avast me signale toujours ce virus. merci

Infecté par win32:tenga

6 réponses

Discussions similaires

Newsletters