[Spyware Récalcitrant] Infecté cacu_001.exe - Page 6

Me REvoila DSL pour le retard jai pas trop eu le temps :

Je vous donne 2 Rapports, AVG et Hijack:

+ Créé à: 08:49:59 18/05/2007

+ Résultat de l'analyse:

C:\Documents and Settings\Administrateur.DREAMCAST\Bureau\EliBaglA.exe -> Heuristic.Win32.AVKiller : Aucune action entreprise.
:mozilla.36:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.37:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.42:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.44:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.40:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Adviva : Aucune action entreprise.
C:\Documents and Settings\Administrateur.DREAMCAST\Cookies\administrateur@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.39:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.91:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.92:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.93:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.43:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.59:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\Administrateur.DREAMCAST\Cookies\administrateur@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
:mozilla.60:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.61:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.62:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.11:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.12:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.30:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.31:C:\Documents and Settings\Administrateur.DREAMCAST\Application Data\Mozilla\Firefox\Profiles\k1kx492a.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\Administrateur.DREAMCAST\Cookies\administrateur@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.

Fin du rapport (jai tout supprimer)

Hijack:

Logfile of HijackThis v1.99.1
Scan saved at 12:09:52, on 18/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Apps\ActivBoard\nhksrv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NetDrive\wdService.exe
C:\Apps\ActivBoard\MMKeybd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Apps\ActivBoard\OSD.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Documents and Settings\Administrateur.DREAMCAST\Bureau\hijackthis\Scanner.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?p=us
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.4.29.dll
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SuperCopier2.exe] "C:\Program Files\SuperCopier2\SuperCopier2.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: ,clkern.dll,wbsys.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: WebDrive Service (WebDriveService) - Unknown owner - C:\Program Files\NetDrive\wdService.exe

donc Si ca pe taider, s'est tant mieux

Re,

Supprime ce fichier :

C:\Documents and Settings\Administrateur.DREAMCAST\Bureau\EliBaglA.exe

Deja fait (Jai bien mis entre parenthese que jai tout supprimer XD)

Torai pas un site possedant des fixs ou des personnes possedant le meme probleme que moi?

Parce que jai limpression de faire du sur-place la! Ca fait le 100e POST et jai toujours le meme probleme

Re,

On recommence tout depuis le début, Qu'as tu comme problème ?

Va voir le post uc elevé que jai crée