impossible de suprimer virus AvG Fermé

Question

Bonjour,voila j'ai un probleme j'ai mon système qui est completement saturé:Quand je vais dans gestionnaire des taches/performances je m'apercois que l'utilisation du CU est au max. Je décide de passer un coup d'avg il me trouve 3 virus mais à la fin impossible de les suprimer. Je décide donc de passer Ad aware et là ilse bloque.J'ai fais un hijack:Logfile of HijackThis v1.99.1Scan saved at 15:49:00, on 30/08/2006Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\csrss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\ibmpmsvc.exeC:\WINNT\system32\svchost.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Iomega\System32\AppServices.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\WINNT\system32egsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\system32\stisvc.exeC:\WINNT\System32\TpChrSrv.exeC:\WINNT\system32\ZONELABS\vsmon.exeC:\WINNT\Explorer.EXEC:\WINNT\system32	p4serv.exeC:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exeC:\WINNT\wanmpsvc.exeC:\Program Files\Iomega\AutoDisk\ADUserMon.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\WINNT\system32\LVCOMSX.EXEC:\WINNT\System32\WBEM\WinMgmt.exeC:\Program Files\Java\jre1.5.0_04\bin\jusched.exeC:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exeC:\PROGRA~1\WANADOO\CnxMon.exeC:\Program Files\Java\jre1.5.0_04\bin\jucheck.exeC:\WINNT\System32\mspmspsv.exeC:\WINNT\system32\svchost.exeC:\PROGRA~1\WANADOO\TaskbarIcon.exeC:\Program Files\Iomega\AutoDisk\ADService.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeC:\Program Files\iPod\bin\iPodService.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32	askmgr.exeC:\WINNT\winhlp32.exeC:\Program Files\Wanadoo\EspaceWanadoo.exeC:\Program Files\Wanadoo\ComComp.exeC:\Program Files\Wanadoo\Watch.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Documents and Settings\Administrateur\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htmR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htmR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = WanadooR3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLLO2 - BHO: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINNT\system32\{7BC051D3-075F-447A-8408-301D207B9402}.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocxO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll (file missing)O3 - Toolbar: (no name) - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - (no file)O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllO3 - Toolbar: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINNT\system32\{7BC051D3-075F-447A-8408-301D207B9402}.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dllO4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exeO4 - HKLM\..\Run: [SoundFusion] RunDll32 cwcprops.cpl,CrystalControlWndO4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logonO4 - HKLM\..\Run: [TpHotkey] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exeO4 - HKLM\..\Run: [LoadQM] loadqm.exeO4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBarO4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXEO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exeO4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exeO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exeO4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"O4 - HKLM\..\Run: [ayxto.exe] C:\WINNT\system32\ayxto.exeO4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.htmlO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin
pjpi150_04.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin
pjpi150_04.dllO9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cabO16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-9.cabO16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - https://support.lenovo.com/fr/en/O16 - DPF: {983AB2CC-3D50-11D9-ADFE-00062919A34C} (ActiveXUpload.UserCtrl) - http://www.photoservice.com/activeX/newUpload.CABO16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/album-photo/wistiti/Upload/ImageUploader35.cabO16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://deposito.traffic-advance.net/1056307.exeO17 - HKLM\System\CCS\Services\Tcpip\..\{89DE897F-CEE4-49BE-A7B0-E10E0BAFB477}: NameServer = 80.10.246.1 80.10.246.132O17 - HKLM\System\CCS\Services\Tcpip\..\{9B02AD9A-4CCA-4C9F-8725-3A2E6D6AFF36}: NameServer = 85.255.116.37,85.255.112.85O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85O20 - Winlogon Notify: tphotkey - C:\WINNT\SYSTEM32	phklock.dllO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exeO23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINNT\system32\ibmpmsvc.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exeO23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: MSSQLSERVER - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe (file missing)O23 - Service: SQLSERVERAGENT - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE (file missing)O23 - Service: ThinkPad PM (TpChrSrv) - Unknown owner - C:\WINNT\System32\TpChrSrv.exeO23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZONELABS\vsmon.exeO23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINNT\wanmpsvc.exeO23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) - Iomega Corporation - C:\Program Files\Iomega\AutoDisk\ADService.exeO23 - Service: Remote Procedure Call (RPC) Helper (%AFå¤¶À¨) - Unknown owner - C:\WINNT\system32\addeb.exe (file missing)Si quelqu'un pouvait m'aider cela serait super cool!!!!!D'avence merci.

DVX · Answer

Slt dje14,C'est très simple,Je te conseil de désinstaller AVG et d'installer Avast, c'est le meilleur antivirus actuellement. Tu analyse tes disques avec, il te permettra de les supprimer ou de les détruire ou de les mettre en quarantaine.DVX

^^Marie^^ · Answer

Salut dje14,tu peux faire ceci stpTelecharge la derniere version stp http://siri.urz.free.fr/Fix/SmitfraudFix.zip Télécharge ceci: (merci a S!RI pour ce programme). http://siri.urz.free.fr/Fix/SmitfraudFix.zip Exécute le, Double click sur Smitfraudfix.cmd choisit l’option 1, il va générer un rapport Copie/colle le sur le poste stp. ---------------------------------------------------------------------------- Démarre en mode sans échec : Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée. Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal ! (Si F8 ne marche pas utilise la touche F5). ---------------------------------------------------------------------------- Relance le programme Smitfraud, Cette fois choisit l’option 2, répond oui a tous ; Sauvegarde le rapport, Redémarre en mode normal, copie/colle le rapport sauvegardé sur le forum========================================et tu recolles un hitjackthisMerciA++

green day · Answer

Salut à vous tu as une belle ptite infection qui pourrait expliquer cette pagaille :-)* Télécharge FixWareout d'un de ces deux sites sur le bureau: http://downloads.subratam.org/Fixwareout.exe http://swandog46.geekstogo.com/Fixwareout.exe * Lance le fix: clique sur Next, puis Install, puis assure toi que "Run fixit" est activé puis clique sur Finish. Le fix va commencer, suis les messages à l'écran. Il te sera demandé de redémarrer ton ordinateur, fais le. Ton système mettra un peu plus de temps au démarrage, c'est normal. *Poste (Copie/colle) le contenu du rapport qui va s'afficher à l'écran (report.txt) avec un nouveau rapport HijackThis! dans ta prochaine réponse.  @+

dje14 · Answer

Logfile of HijackThis v1.99.1Scan saved at 18:25:15, on 30/08/2006Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\ibmpmsvc.exeC:\WINNT\system32\svchost.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Iomega\System32\AppServices.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\WINNT\system32egsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\system32\stisvc.exeC:\WINNT\Explorer.EXEC:\WINNT\System32\TpChrSrv.exeC:\WINNT\system32\ZONELABS\vsmon.exeC:\WINNT\wanmpsvc.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\System32\mspmspsv.exeC:\WINNT\system32\svchost.exeC:\Program Files\Iomega\AutoDisk\ADService.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\WINNT\system32	askmgr.exeC:\WINNT\system32\NOTEPAD.EXEC:\WINNT\system32	p4serv.exeC:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exeC:\Program Files\Iomega\AutoDisk\ADUserMon.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exeC:\WINNT\system32\LVCOMSX.EXEC:\Program Files\Java\jre1.5.0_04\bin\jusched.exeC:\PROGRA~1\WANADOO\CnxMon.exeC:\PROGRA~1\WANADOO\TaskbarIcon.exeC:\WINNT\System32\svchost.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Wanadoo\EspaceWanadoo.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\Program Files\iPod\bin\iPodService.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Wanadoo\ComComp.exeC:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeC:\Program Files\Wanadoo\Watch.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Documents and Settings\Administrateur\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htmR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htmR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = WanadooR3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLLO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocxO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll (file missing)O3 - Toolbar: (no name) - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - (no file)O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dllO4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exeO4 - HKLM\..\Run: [SoundFusion] RunDll32 cwcprops.cpl,CrystalControlWndO4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logonO4 - HKLM\..\Run: [TpHotkey] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exeO4 - HKLM\..\Run: [LoadQM] loadqm.exeO4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBarO4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXEO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exeO4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exeO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exeO4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.htmlO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin
pjpi150_04.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin
pjpi150_04.dllO9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cabO16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-9.cabO16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - https://support.lenovo.com/fr/en/O16 - DPF: {983AB2CC-3D50-11D9-ADFE-00062919A34C} (ActiveXUpload.UserCtrl) - http://www.photoservice.com/activeX/newUpload.CABO16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/album-photo/wistiti/Upload/ImageUploader35.cabO16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://deposito.traffic-advance.net/1056307.exeO17 - HKLM\System\CCS\Services\Tcpip\..\{89DE897F-CEE4-49BE-A7B0-E10E0BAFB477}: NameServer = 80.10.246.1 80.10.246.132O17 - HKLM\System\CCS\Services\Tcpip\..\{9B02AD9A-4CCA-4C9F-8725-3A2E6D6AFF36}: NameServer = 85.255.116.37,85.255.112.85O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85O20 - Winlogon Notify: tphotkey - C:\WINNT\SYSTEM32	phklock.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exeO23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINNT\system32\ibmpmsvc.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exeO23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: MSSQLSERVER - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe (file missing)O23 - Service: SQLSERVERAGENT - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE (file missing)O23 - Service: ThinkPad PM (TpChrSrv) - Unknown owner - C:\WINNT\System32\TpChrSrv.exeO23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZONELABS\vsmon.exeO23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINNT\wanmpsvc.exeO23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) - Iomega Corporation - C:\Program Files\Iomega\AutoDisk\ADService.exeO23 - Service: Remote Procedure Call (RPC) Helper (%AFå¤¶À¨) - Unknown owner - C:\WINNT\system32\addeb.exe (file missing)Fixwareout ver 1.003Last edited 8/11/2006Post this report in the forums please  Reg Entries that were deleted HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\xedocneHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuinsepiwohHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\23plhpsHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\mgcpppHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins	esvafHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins
lcalikHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\sfdmdHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}85E505E9438C-A2C8-3B34-A48D-8C449D0B{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}BF731FD60B73-EA4B-39C4-3098-67A6EC1E{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}03230C76EDD4-7DEB-1CC4-D6F3-47E3B97D{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}8D36C963818B-D098-FA34-2084-56340700{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}D227CCE5FD1C-D308-FD74-86DE-597A3531{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}8FCAEB8ACEF2-47BA-B044-FC05-78A2052F{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}89A8A85DE6E3-DBE8-54F4-831C-730C75F6{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}D94FC776D4EA-664B-C154-26E2-0559B965{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}FBBE7E52E7D7-E6C8-B384-FF18-D166C052{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}E2618E52EBB1-A08B-F184-395C-2BF90868{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}18BBAAD1CBB2-809B-BE94-68CD-532857B9{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}BF0FECF9C086-7B39-60B4-C383-4214A7F4{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}52C522FCEAD5-1D7B-41B4-28BC-8BDC0679{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}7445C5E8955E-71DB-D9F4-5572-33E29ACD{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}D92FBAE64A4C-90E8-1674-6D95-75D20594{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}041959AF2F2E-0B4A-C0D4-2F49-ACC2C41C{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}42AF5A925E76-2418-F544-4A5C-9CA3C7B4{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}7F8FF0DE6334-01D9-8B44-F192-0C855620{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}6CDEA203B479-7C5B-A924-2882-54BEA195{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}EBC26FDA613B-47BA-51C4-4994-32A208C2{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}57D4436983DE-7EA8-A104-ED9F-14818B84{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}DD4FD9AA9FA4-BA78-1614-652E-C9D040E9{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}F77174E2493B-059B-1714-289E-77CBD356{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}406583181AFE-AB69-9B34-DC24-95D3EE14{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}8BCEAC30755E-86A9-45D4-624B-11516466{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}EC80AB156BDB-D379-A304-6CD0-5491D2F5{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}57EE429AD709-799A-12B4-AF11-062E4734{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}4542451FEA8F-0B68-24A4-7E6D-5DF9B4D9{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}F66CBDFA050F-172A-31F4-7CF2-A49881B6{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}BE1C8041B375-3299-8824-2C3D-0EF963DE{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}4853980D5F02-3A9A-D954-85FF-22411B74{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}E45EBB45527E-BD48-FF84-7093-2A1AFD30{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}2B98AFC0013E-D519-A764-8998-11F3EA98{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}E58E8F47BD47-A279-1784-5F04-19FF5741{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}078C46C1CF86-D819-1DF4-48E1-8B60DEE0{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}1BDA4A2C03FC-B178-6174-4837-40A1C0BD{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}A61C2DC665D4-C008-EB84-A856-C4AA1E44{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}ABE4D7BF1CC6-3C28-3E64-0D02-EFA46952{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}99278B73CF66-096A-EA44-6307-C6DC5000{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}7E3D0ADA5317-F7E8-FB34-92C4-7D922330{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}2EE3F208AF0D-1FFB-BF14-5843-0E1BF700{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}3D713FEE4A5A-C429-89D4-9E25-A253E0B0{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}CF5032296D37-A969-D6E4-4495-51507C19{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}197532735708-0139-F414-015F-B1CDB880{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}FD691CE8B047-E348-E1E4-0D37-01F756CB{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}DA3A22993EDF-73B8-5B64-D6FD-4355F400{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}0178F94CA00E-97A9-5114-37D6-3BE37ACD{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}1BFC484438D3-5F28-8634-4CD5-A6DCB6F4{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}6F976A12DEBB-A9AB-6EA4-6013-33190B9F{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}CFBE39989952-A668-15D4-DFAE-D78447F9{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}F56507586669-5379-5F14-E92A-120228AC{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}5AAFB7DF7740-092A-2994-9519-9714E5DE{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\}C1A249737C62-7878-BB24-49D3-F5DC99EA{HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionuins\znomdHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\xedocneHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\gib_ogolHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\UrlsepiwohHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\llunHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\23plhpsHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\mgcpppHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls	esvafHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls
lcalikHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\swenHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\eerhtHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ypszrHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\putesprpgdHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\onisacputesHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ogol...Microsoft (R) Windows Script Host Version 5.6Random Runs removed from HKLM "dmdfs.exe"=-"dmonz.exe"=-... PLEASE NOTE, There WILL be LEGITIMATE FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. »»»»» Searching by size/names...  »»»»» Search five digit cs, dm and jb files.This WILL/CAN also list Legit Files, Submit them at VirustotalC:\WINNT\SYSTEM32\CSHSF.EXE       51 264 2006-08-30      C:\WINNT\SYSTEM32\DMONZ.EXE       62 030 2003-06-19 Other suspects.Directory of C:\WINNT\system32{ED5E4179-9159-4992-A290-0477FD7BFAA5}.exe{CA822021-A29E-41F5-9735-96668570565F}.exe{9F74487D-EAFD-4D51-866A-25998993EBFC}.exe{F9B09133-3106-4AE6-BA9A-BBED21A679F6}.exe{4F6BCD6A-5DC4-4368-82F5-3D834484CFB1}.exe{DCA73EB3-6D73-4115-9A79-E00AC49F8710}.exe{004F5534-DF6D-46B5-8B37-FDE39922A3AD}.exe{BC657F10-73D0-4E1E-843E-740B8EC196DF}.exe{088BDC1B-F510-414F-9310-807537235791}.exe{91C70515-5944-4E6D-969A-73D6922305FC}.exe{0B0E352A-52E9-4D98-924C-A5A4EEF317D3}.exe{007FB1E0-3485-41FB-BFF1-D0FA802F3EE2}.exe{033229D7-4C29-43BF-8E7F-7135ADA0D3E7}.exe{0005CD6C-7036-44AE-A690-66FC37B87299}.exe{25964AFE-20D0-46E3-82C3-6CC1FB7D4EBA}.exe{44E1AA4C-658A-48BE-800C-4D566CD2C16A}.exe{DB0C1A04-7384-4716-871B-CF30C2A4ADB1}.exe{0EED06B8-1E84-4FD1-918D-68FC1C64C870}.exe{1475FF91-40F5-4871-972A-74DB74F8E85E}.exe{89AE3F11-8998-467A-915D-E3100CFA89B2}.exe{3A19CCBA-42AC-4E42-B89C-3823DC9B867E}.exe{644718A5-C002-4965-AC6D-D7FFF94DBE9C}.exe{A49C6287-4EC3-493C-BBFC-FDE148C202B1}.exe{03DFA1A2-3907-48FF-84DB-E72554BBE54E}.exe{47B11422-FF58-459D-A9A3-20F5D0893584}.exe{ED369FE0-D3C2-4288-9923-573B1408C1EB}.exe{6B18894A-2FC7-4F13-A271-F050AFDBC66F}.exe{9D4B9FD5-D6E7-4A42-86B0-F8AEF1542454}.exe{4374E260-11FA-4B21-A997-907DA924EE75}.exe{5F2D1945-0DC6-403A-973D-BDB651BA08CE}.exe{66461511-B426-4D54-9A68-E55703CAECB8}.exe{41EE3D59-42CD-43B9-96BA-EFA181385604}.exe{653DBC77-E982-4171-B950-B3942E47177F}.exe{9E040D9C-E256-4161-87AB-4AF9AA9DF4DD}.exe{48B81841-F9DE-401A-8AE7-ED3896344D75}.exe{2C802A23-4994-4C15-AB74-B316ADF62CBE}.exe{591AEB45-2882-429A-B5C7-974B302AEDC6}.exe{026558C0-291F-44B8-9D10-4336ED0FF8F7}.exe{4B7C3AC9-C5A4-445F-8142-67E529A5FA24}.exe{C14C2CCA-94F2-4D0C-A4B0-E2F2FA959140}.exe{49502D57-59D6-4761-8E09-C4A46EABF29D}.exe{DCA92E33-2755-4F9D-BD17-E5598E5C5447}.exe{9760CDB8-CB82-4B14-B7D1-5DAECF225C25}.exe{4F7A4124-383C-4B06-93B7-680C9FCEF0FB}.exe{9B758235-DC86-49EB-B908-2BBC1DAABB81}.exe{86809FB2-C593-481F-B80A-1BBE25E8162E}.exe{250C661D-81FF-483B-8C6E-7D7E25E7EBBF}.exe{569B9550-2E62-451C-B466-AE4D677CF49D}.exe{6F57C037-C138-4F45-8EBD-3E6ED58A8A98}.exe{F2502A87-50CF-440B-AB74-2FECA8BEACF8}.exe{00704365-4802-43AF-890D-B818369C63D8}.exe{D79B3E74-3F6D-4CC1-BED7-4DDE67C03230}.exe{E1CE6A76-8903-4C93-B4AE-37B06DF137FB}.exe »»»»» Misc files.  »»»»» Checking for older varients covered by the Rem3 tool.

green day · Answer

le fixe a bien travaillé ! fais la manip de Marie maintenant ( cf poste 2)++

Impossible de suprimer virus AvG

5 réponses

Discussions similaires