Svchost.exe Erreur d'application & Thunderbir
Résolu
_pje_
Messages postés
4
Statut
Membre
-
philae83 Messages postés 12854 Statut Contributeur sécurité -
philae83 Messages postés 12854 Statut Contributeur sécurité -
Bonjour,
L'erreur ci dessous me bloque la conexion internet et apparait lorsque je lancement Mozilla Thunderbird:
"svchost.exe Erreur d'aplication : L'exception Exception logicielle inconnue (0x0000409) s'est produite dans l'application à l'emplcaement 0x6feea3c0."
Ma configuration: Win XP Pro / SP2
Antivirus: AVG
Firewall: celui de windows apres avoir désinstaller ZoneAlarm car il plantait lui aussi. Impossible de réinstaller ZoneAlarm
J'ai déjà utilisé Spybot, Ad-Aware SE Personal, a-squared Free mais sans succès.
Ci dessous le log de HiJackThis.
Pourriez vous me donner votre avis, SVP.
Merci d'avance,
_PJE_
Logfile of HijackThis v1.99.1
Scan saved at 22:38:46, on 20/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb03.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\modem ADSL USB\modem ADSL USB\dslmon.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\WINDOWS\system32\rundll32.exe
E:\Telechargements\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.9online.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MSChoExE] suge.exe
O4 - HKLM\..\Run: [Win32 USB2 Driver] sys32snd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Win32 USB2 Driver] sys32snd.exe
O4 - HKCU\..\Run: [MSChoExE] suge.exe
O4 - HKCU\..\Run: [a²] "C:\Program Files\a2\a2guard.exe"
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AAE99496-0C76-4E0E-9299-ECB9A4410F51}: NameServer = 86.64.145.146 84.103.237.146
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: System - {F2871F85-C0FD-4BA2-8D2E-7E603A2DA85F} - C:\WINDOWS\system32\system32.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
L'erreur ci dessous me bloque la conexion internet et apparait lorsque je lancement Mozilla Thunderbird:
"svchost.exe Erreur d'aplication : L'exception Exception logicielle inconnue (0x0000409) s'est produite dans l'application à l'emplcaement 0x6feea3c0."
Ma configuration: Win XP Pro / SP2
Antivirus: AVG
Firewall: celui de windows apres avoir désinstaller ZoneAlarm car il plantait lui aussi. Impossible de réinstaller ZoneAlarm
J'ai déjà utilisé Spybot, Ad-Aware SE Personal, a-squared Free mais sans succès.
Ci dessous le log de HiJackThis.
Pourriez vous me donner votre avis, SVP.
Merci d'avance,
_PJE_
Logfile of HijackThis v1.99.1
Scan saved at 22:38:46, on 20/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb03.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\modem ADSL USB\modem ADSL USB\dslmon.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\WINDOWS\system32\rundll32.exe
E:\Telechargements\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.9online.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MSChoExE] suge.exe
O4 - HKLM\..\Run: [Win32 USB2 Driver] sys32snd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Win32 USB2 Driver] sys32snd.exe
O4 - HKCU\..\Run: [MSChoExE] suge.exe
O4 - HKCU\..\Run: [a²] "C:\Program Files\a2\a2guard.exe"
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AAE99496-0C76-4E0E-9299-ECB9A4410F51}: NameServer = 86.64.145.146 84.103.237.146
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: System - {F2871F85-C0FD-4BA2-8D2E-7E603A2DA85F} - C:\WINDOWS\system32\system32.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
Configuration: Windows XP Firefox 2.0.0.1 Thunderbird 1.5.0.9
7 réponses
-
bonsoir,
ton pc est infecté
* télécharge AVG Anti-Spyware (ewido)
https://www.avg.com/en-ww/free-antivirus-download
* tu l'installes
* lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente
puis
Lance AVG Anti-Spyware
Clique sur le bouton Analyse (de la barre d'outils)
Puis sur l'onglet Paramètres,
sous : "Comment réagir "clique sur Actions recommandées. Sélectionne Quarantaine.
Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
A la fin du scan, choisis l'option 3
"Appliquer toutes les actions " en bas.
Clique sur "Enregistrer le rapport".
Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.
Poste le.
et reposte à l'issu, un nouveau rapport hijackthis
-
Bonsoir,
Merci pour l'intéret que tu portes à mon pb.
Ci dessous les 2 rapports demandés.
Le pb n'est pas corrigé.
a+
_PJE_
Voici le rapport de d'AVG Anti-Spyware:
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 22:34:24 21/02/2007
+ Résultat de l'analyse:
E:\Telechargements\Setup.exe -> Adware.180Solutions : Aucune action entreprise.
E:\Telechargements\spac2001.exe -> Adware.180Solutions : Aucune action entreprise.
D:\Mes documents\divers\Jeux\tetris4000\file42_tetris_4000.zip/Tetris4k_25_Loader.exe -> Not-A-Virus.HackTool.Win32.Fumn : Aucune action entreprise.
E:\Jeux\tetris4000\file42_tetris_4000.zip/Tetris4k_25_Loader.exe -> Not-A-Virus.HackTool.Win32.Fumn : Aucune action entreprise.
:mozilla.6:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.9:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.166:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.304:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.29:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.30:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.126:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.127:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.132:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.28:C:\Documents and Settings\Peyo\Application Data\Thunderbird\Profiles\default.ahe\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.34:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.60:C:\Documents and Settings\Peyo\Application Data\Thunderbird\Profiles\default.ahe\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.69:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.26:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.27:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.28:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.14:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.57:C:\Documents and Settings\Peyo\Application Data\Thunderbird\Profiles\default.ahe\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.130:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
:mozilla.53:C:\Documents and Settings\Peyo\Application Data\Thunderbird\Profiles\default.ahe\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
:mozilla.142:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.143:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.41:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.43:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.44:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.125:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.61:C:\Documents and Settings\Peyo\Application Data\Thunderbird\Profiles\default.ahe\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.291:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.53:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.54:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.297:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
:mozilla.298:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
:mozilla.299:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
:mozilla.119:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.120:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.121:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.122:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.123:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.124:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.87:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.88:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.89:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.90:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.148:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.23:C:\Documents and Settings\Peyo\Application Data\Thunderbird\Profiles\default.ahe\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.37:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.38:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.39:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
E:\Telechargements\logiciels\Ghost\Symantec Norton Ghost v9 Fr Crack Keygen.zip/Symantec.Norton.Ghost.v9.Fr.crack.keygen/-- Symantec Norton Ghost 9.0 - KeyGen --.exe -> Trojan.Keygen.s : Aucune action entreprise.
E:\Telechargements\crack\Security_Task_Manager_1[1].x.PATCH_MP2K.zip/Security.Task.Manager.1.x-Regpatch.exe -> Trojan.Regpat.a : Aucune action entreprise.
Fin du rapport
Voici le log HiJackThis:
Logfile of HijackThis v1.99.1
Scan saved at 22:38:44, on 21/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb03.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\modem ADSL USB\modem ADSL USB\dslmon.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Peyo\Bureau\Security\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.9online.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MSChoExE] suge.exe
O4 - HKLM\..\Run: [Win32 USB2 Driver] sys32snd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Win32 USB2 Driver] sys32snd.exe
O4 - HKCU\..\Run: [MSChoExE] suge.exe
O4 - HKCU\..\Run: [a²] "C:\Program Files\a2\a2guard.exe"
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AAE99496-0C76-4E0E-9299-ECB9A4410F51}: NameServer = 84.103.237.146 86.64.145.146
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: System - {F2871F85-C0FD-4BA2-8D2E-7E603A2DA85F} - C:\WINDOWS\system32\system32.dll (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
-
-
je te prépare la manip
E:\Telechargements\crack
ne cherche pas l'infection.... !!!!
-
* lance hijackthis "do a system scan only" et coche
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MSChoExE] suge.exe
O4 - HKLM\..\Run: [Win32 USB2 Driver] sys32snd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Win32 USB2 Driver] sys32snd.exe
O4 - HKCU\..\Run: [MSChoExE] suge.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
021 - SSODL: System - {F2871F85-C0FD-4BA2-8D2E-7E603A2DA85F} - C:\WINDOWS\system32\system32.dll (file missing)
* ferme toutes les applications ouvertes y compris Internet Explorer, et clique sur "fix checked"
puis
* Assure toi d'avoir accès à tous les fichiers
-démarrer
-poste de travail ou autre dossier
-menu outils
-options de dossier
-onglet affichage
puis
- activer la case : Afficher les fichiers et dossiers cachés
- désactiver la case : Masquer les extensions des fichiers dont le type est connu
- désactiver la case : Masquer les fichier protégés du système d'exploitation
Puis - Appliquer
* et Supprime le(s) fichier(s) ci dessous si il(s) est (sont) présent(s) :
C:\WINDOWS\system32\system32.dll
C:\WINDOWS\system32\sys32snd.exe
C:\WINDOWS\system32\suge.exe
* Dans l'Explorateur Windows recache les fichiers système afin de ne pas faire d'erreur à l'avenir. Retourne à la fenêtre Paramètres de dossiers et sélectionne Ne pas afficher les fichiers cachés ou les fichiers système
* relance AVG pour un scan complet, et stp applique les actions avant de sauvegarder le rapport
poste le ensuite ainsi qu'un nouveau rapport Hijackthis
-
Bonsoir,
Je n'ai pas trouvé les fichiers ci-dessous:
C:\WINDOWS\system32\system32.dll
C:\WINDOWS\system32\sys32snd.exe
C:\WINDOWS\system32\suge.exe
Voici les logs AVG et HijackThis.
merci,
_PJE_
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 20:46:49 22/02/2007
+ Résultat de l'analyse:
:mozilla.7:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.8:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.185:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.322:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.62:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.63:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.145:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.146:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.151:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.67:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.15:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.19:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.59:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.60:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.61:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.48:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.149:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.161:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.162:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.71:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.73:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.74:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.22:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.23:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.24:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.47:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.309:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.83:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.84:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.315:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.316:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.317:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.20:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Revenue : Nettoyé.
:mozilla.21:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Revenue : Nettoyé.
:mozilla.139:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.140:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.141:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.142:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.143:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.144:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.213:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
:mozilla.214:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
:mozilla.215:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
:mozilla.216:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
:mozilla.217:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
:mozilla.218:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
:mozilla.107:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.108:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.109:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.110:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.167:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.34:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.35:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.36:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.26:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.27:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.28:C:\Documents and Settings\Peyo\Application Data\Mozilla\Firefox\Profiles\default.dzs\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
Fin du rapport
Voici le log HiJakThis:
Logfile of HijackThis v1.99.1
Scan saved at 21:56:17, on 22/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb03.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\modem ADSL USB\modem ADSL USB\dslmon.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Peyo\Bureau\Security\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.9online.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [a²] "C:\Program Files\a2\a2guard.exe"
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{AAE99496-0C76-4E0E-9299-ECB9A4410F51}: NameServer = 86.64.145.141 84.103.237.141
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
bonsoir,
il faudrait :
* Fait un scan antivirus en ligne
https://www.bitdefender.fr/
et copie colle le résultat ici
* En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
* Dans la nouvelle fenêtre, clique sur I agree
* La fenêtre change encore, clique sur Click here to scan
* Les signatures se chargent, etc.
* désactive AVG maintenant (ne le désinstalle pas) tu as déjà A2 en résident. -
Bonsoir,
Le problème venait de l'installation de AVG Antivirus 7.5.
J'avais depuis 3 ans AVG Antivirus et ZoneAlarm que j'ai troqué pour
Avast et Kerio.
Merci Philae83 pour ton aide qui m'aura permis de supprimer virus et espions.
@+ -
Bonsoir,
parfait. Au moins tu as eu l'occasion d'avoir un pc nettoyé
tu peux également jeter un oeil ici pour le garder propre.
securite proteger un ordinateur contre les malwares d internet
BONNE CONTINUATION
