Infection récurente

Résolu
Adam94 Messages postés 154 Statut Membre -  
 Utilisateur anonyme -
Salut a tous! voila j'ai un problème assez ennuyant à vrai dire. En effet mon pc ralentit depuis peu et des pages internet s'ouvrent sans que j'ai demandé quelque chose. je vous poste un log hijackthis en esperant que vous m'aiderez à resoudre mon problème. Merci a tous!

Logfile of HijackThis v1.99.1
Scan saved at 22:21:17, on 02/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Documents and Settings\All Users\Application Data\ypwfkzup.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BitComet\BitComet.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.huddi.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {A92664F7-F057-404D-9C61-1FE1C728DA36} - C:\WINDOWS\system32\jkhfd.dll
O2 - BHO: (no name) - {BEDF30ED-41B2-4CDC-875A-ED063C81AF7B} - C:\WINDOWS\system32\cbxwusr.dll
O2 - BHO: (no name) - {CD3447D4-CA39-4377-8084-30E86331D74C} - C:\WINDOWS\system32\vjhlexom.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ypwfkzup.exe] C:\Documents and Settings\All Users\Application Data\ypwfkzup.exe
O4 - HKLM\..\Run: [Genuine] rundll32.exe "C:\WINDOWS\system32\ixwofuvl.dll",realset
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: BlueSoleil.lnk = ?
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: cbxwusr - C:\WINDOWS\SYSTEM32\cbxwusr.dll
O20 - Winlogon Notify: jkhfd - C:\WINDOWS\system32\jkhfd.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
Configuration: Windows XP
Firefox 2.0.0.4

13 réponses

  1. Utilisateur anonyme
     
    salut à toi,
    lis ceci :
    http://leblogdeclaude.blogspot.com/2007/06/bienvenue-sur-ccm.html
    ensuite:
    coche + fixer les lignes suivantes:
    comment faire ?
    https://leblogdeclaude.blogspot.com/2007/05/comment-utiliser-hijackthis-fixer.html

    -------------------------------------------------------------

    O2 - BHO: (no name) - {A92664F7-F057-404D-9C61-1FE1C728DA36} - C:\WINDOWS\system32\jkhfd.dll

    O2 - BHO: (no name) - {BEDF30ED-41B2-4CDC-875A-ED063C81AF7B} - C:\WINDOWS\system32\cbxwusr.dll

    O2 - BHO: (no name) - {CD3447D4-CA39-4377-8084-30E86331D74C} - C:\WINDOWS\system32\vjhlexom.dll
    O4 - HKLM\..\Run: [ypwfkzup.exe] C:\Documents and Settings\All Users\Application Data\ypwfkzup.exe
    O4 - HKLM\..\Run: [Genuine] rundll32.exe "C:\WINDOWS\system32\ixwofuvl.dll",realset
    O20 - Winlogon Notify: cbxwusr - C:\WINDOWS\SYSTEM32\cbxwusr.dl
    O20 - Winlogon Notify: jkhfd - C:\WINDOWS\system32\jkhfd.dll
    -----------------------------------------------------
    ensuite fais ceci:
    https://leblogdeclaude.blogspot.com/2007/03/informatique-procdure-navifix.html
    postes le log

    0
    1. Adam94 Messages postés 154 Statut Membre 1
       
      Merci beaucoup pour ton aide philo. Je vais suivre à la lettre tes recommandationss voila mon log.

      Logfile of HijackThis v1.99.1
      Scan saved at 23:07:23, on 02/06/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16441)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\UAService7.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\explorer.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\BitComet\BitComet.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\WinRAR\WinRAR.exe
      C:\Program Files\Winamp\Winamp.exe
      C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.huddi.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
      O2 - BHO: (no name) - {A92664F7-F057-404D-9C61-1FE1C728DA36} - C:\WINDOWS\system32\jkhfd.dll
      O2 - BHO: (no name) - {BEDF30ED-41B2-4CDC-875A-ED063C81AF7B} - C:\WINDOWS\system32\cbxwusr.dll
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: BlueSoleil.lnk = ?
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O20 - Winlogon Notify: cbxwusr - C:\WINDOWS\SYSTEM32\cbxwusr.dll
      O20 - Winlogon Notify: jkhfd - C:\WINDOWS\system32\jkhfd.dll
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exe
      O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
      0
    2. Adam94 Messages postés 154 Statut Membre 1
       
      excuse moi j'ai oublier l'etape navilog je l'execute tt de suite .
      0
    3. Adam94 Messages postés 154 Statut Membre 1
       
      voila ce que tu m'a demandé et encore merci.

      Fix lancé depuis C:\Program Files\navilog1
      Mise a jour le 17.05.2007 a 23h00 by IL-MAFIOSO

      Executé en mode normal

      *** Recherche Programmes installes ***




      *** Recherche dossiers dans C:\WINDOWS ***




      *** Recherche dossiers dans C:\Program Files ***




      *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




      *** Recherche dossiers dans C:\Documents and Settings\Compaq_Propri‚taire\Application Data ***



      *** Recherche avec BlackLight Engine/F-secure ***
      BlackLight Engine est un produit de F-secure, pour + d'infos :
      https://www.f-secure.com/en


      F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
      ======================================

      Copyright 2005-2006 F-Secure Corporation. All rights reserved.
      This is a beta version. It will expire on 1st of April, 2007.
      Version information: 2.2.1061.

      [+] Started on 06/02/07 at 23:22:11.
      [+] Initializing ...
      [+] Starting scan, press Ctrl-C to abort.
      [+] Scanning for hidden items ................................................................................................................................................................................................................................................................
      [+] Scan complete.
      [+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
      [+] Exited on 06/02/07 at 23:55:27 (return code = 0).


      *** Recherche fichiers ***




      *** Recherche cles registre ***


      Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]



      Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]



      Recherche Clé Magic Control



      *** Module de Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Recherche fichiers connus:

      C:\WINDOWS\system32\lnnmp.ini2 trouvé ! infection Vundo possible non traité par cet outil !
      C:\WINDOWS\system32\dfhkj.bak1 trouvé ! infection Vundo possible non traité par cet outil !
      C:\WINDOWS\system32\dfhkj.bak2 trouvé ! infection Vundo possible non traité par cet outil !

      2)Recherche Heuristique :
      *
      **
      ***
      ****
      *****
      ******
      *******
      ********


      *** Analyse Terminé le 02/06/2007 à 23:58:15,64 ***
      0
  2. Utilisateur anonyme
     
    Bien, on avance.
    fais ceci:
    https://leblogdeclaude.blogspot.com/2007/05/procdure-vundofix.html
    0
    1. Adam94 Messages postés 154 Statut Membre 1
       
      Bonsoir philo voila le log vundo et merci encore!

      VundoFix V6.4.2

      Checking Java version...

      Java version is 1.4.2.3
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.2
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.6
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.9
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.10

      Java version is 1.5.0.11

      Scan started at 21:32:03 03/06/2007

      Listing files found while scanning....

      C:\WINDOWS\system32\cbxwusr.dll
      C:\WINDOWS\system32\dfhkj.bak1
      C:\WINDOWS\system32\dfhkj.bak2
      C:\WINDOWS\system32\dfhkj.ini
      C:\WINDOWS\system32\hgghebx.dll
      C:\WINDOWS\system32\hjjlm.ini
      C:\WINDOWS\system32\ixwofuvl.dll
      C:\WINDOWS\system32\jkhfd.dll
      C:\WINDOWS\system32\kfqxryaq.dll
      C:\WINDOWS\system32\kghgvbgw.dll
      C:\WINDOWS\system32\lvufowxi.ini
      C:\WINDOWS\system32\mljhhfc.dll
      C:\WINDOWS\system32\mljjh.dll
      C:\WINDOWS\system32\mocieiqf.dll
      C:\WINDOWS\system32\vjhlexom.dll
      C:\WINDOWS\system32\wgbvghgk.ini

      Beginning removal...

      Attempting to delete C:\WINDOWS\system32\cbxwusr.dll
      C:\WINDOWS\system32\cbxwusr.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\dfhkj.bak1
      C:\WINDOWS\system32\dfhkj.bak1 Has been deleted!

      Attempting to delete C:\WINDOWS\system32\dfhkj.bak2
      C:\WINDOWS\system32\dfhkj.bak2 Has been deleted!

      Attempting to delete C:\WINDOWS\system32\dfhkj.ini
      C:\WINDOWS\system32\dfhkj.ini Has been deleted!

      Attempting to delete C:\WINDOWS\system32\hgghebx.dll
      C:\WINDOWS\system32\hgghebx.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\hjjlm.ini
      C:\WINDOWS\system32\hjjlm.ini Has been deleted!

      Attempting to delete C:\WINDOWS\system32\ixwofuvl.dll
      C:\WINDOWS\system32\ixwofuvl.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\jkhfd.dll
      C:\WINDOWS\system32\jkhfd.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\kfqxryaq.dll
      C:\WINDOWS\system32\kfqxryaq.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\kghgvbgw.dll
      C:\WINDOWS\system32\kghgvbgw.dll Could not be deleted.

      Attempting to delete C:\WINDOWS\system32\lvufowxi.ini
      C:\WINDOWS\system32\lvufowxi.ini Has been deleted!

      Attempting to delete C:\WINDOWS\system32\mljhhfc.dll
      C:\WINDOWS\system32\mljhhfc.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\mljjh.dll
      C:\WINDOWS\system32\mljjh.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\mocieiqf.dll
      C:\WINDOWS\system32\mocieiqf.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\vjhlexom.dll
      C:\WINDOWS\system32\vjhlexom.dll Has been deleted!

      Attempting to delete C:\WINDOWS\system32\wgbvghgk.ini
      C:\WINDOWS\system32\wgbvghgk.ini Has been deleted!

      Performing Repairs to the registry.
      Done!

      Beginning removal...

      VundoFix V6.4.2

      Checking Java version...

      Java version is 1.4.2.3
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.2
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.6
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.9
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.10

      Java version is 1.5.0.11

      Scan started at 21:56:11 03/06/2007

      Listing files found while scanning....
      0
  3. Utilisateur anonyme
     
    ok,
    fais ceci:
    Il faut mettre ta version Java à jour, fais ceci:
    https://www.java.com/fr/download/manual.jsp
    et fais la mise à jour.
    ----------------------------------
    refais ceci pour voir si tu n'as plus rien de caché.
    https://leblogdeclaude.blogspot.com/2007/03/informatique-procdure-navifix.html
    0
    1. Adam94 Messages postés 154 Statut Membre 1
       
      Voila ce que tu m'à demandé philo merci encore.

      Fix lancé depuis C:\Program Files\navilog1
      Mise a jour le 17.05.2007 a 23h00 by IL-MAFIOSO

      Executé en mode normal

      *** Recherche Programmes installes ***




      *** Recherche dossiers dans C:\WINDOWS ***




      *** Recherche dossiers dans C:\Program Files ***




      *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




      *** Recherche dossiers dans C:\Documents and Settings\Compaq_Propri‚taire\Application Data ***



      *** Recherche avec BlackLight Engine/F-secure ***
      BlackLight Engine est un produit de F-secure, pour + d'infos :
      https://www.f-secure.com/en


      F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
      ======================================

      Copyright 2005-2006 F-Secure Corporation. All rights reserved.
      This is a beta version. It will expire on 1st of April, 2007.
      Version information: 2.2.1061.

      [+] Started on 06/04/07 at 18:49:48.
      [+] Initializing ...
      [+] Starting scan, press Ctrl-C to abort.
      [+] Scanning for hidden items ........................................................................................
      [+] Scan complete.
      [+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
      [+] Exited on 06/04/07 at 18:59:41 (return code = 0).


      *** Recherche fichiers ***




      *** Recherche cles registre ***


      Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]



      Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]



      Recherche Clé Magic Control



      *** Module de Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Recherche fichiers connus:

      C:\WINDOWS\system32\lnnmp.ini2 trouvé ! infection Vundo possible non traité par cet outil !

      2)Recherche Heuristique :
      *
      **
      ***
      ****
      *****
      ******
      *******
      ********


      *** Analyse Terminé le 04/06/2007 à 19:00:23,81 ***
      0
  4. Utilisateur anonyme
     
    bien fait ceci:
    https://leblogdeclaude.blogspot.com/2007/05/procdure-vundofix.html
    0
    1. Adam94 Messages postés 154 Statut Membre 1
       
      Bonsoir voici le scan vundo.

      VundoFix V6.4.2

      Checking Java version...

      Java version is 1.4.2.3
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.2
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.6
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.9
      Old versions of java are exploitable and should be removed.

      Java version is 1.5.0.10

      Java version is 1.5.0.11

      Scan started at 19:57:06 04/06/2007

      Listing files found while scanning....

      C:\WINDOWS\system32\kghgvbgw.dll

      Beginning removal...

      Attempting to delete C:\WINDOWS\system32\kghgvbgw.dll
      C:\WINDOWS\system32\kghgvbgw.dll Has been deleted!

      Performing Repairs to the registry.
      Done!
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  7. Utilisateur anonyme
     
    Bien refaits un log Hijackthis
    0
    1. Adam94 Messages postés 154 Statut Membre 1
       
      Bonjour philo voila ce que tu m'a demandé.

      Logfile of HijackThis v1.99.1
      Scan saved at 12:41:59, on 05/06/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16441)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\UAService7.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.huddi.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O2 - BHO: (no name) - {A92664F7-F057-404D-9C61-1FE1C728DA36} - C:\WINDOWS\system32\jkhfd.dll (file missing)
      O2 - BHO: (no name) - {BEDF30ED-41B2-4CDC-875A-ED063C81AF7B} - C:\WINDOWS\system32\cbxwusr.dll (file missing)
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: BlueSoleil.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exe
      O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
      0
  8. Utilisateur anonyme
     
    bien, coches + fixer ces lignes
    comment faire ?
    https://leblogdeclaude.blogspot.com/2007/05/comment-utiliser-hijackthis-fixer.html
    -----------------------------------------
    O2 - BHO: (no name) - {A92664F7-F057-404D-9C61-1FE1C728DA36} - C:\WINDOWS\system32\jkhfd.dll (file missing)
    O2 - BHO: (no name) - {BEDF30ED-41B2-4CDC-875A-ED063C81AF7B} - C:\WINDOWS\system32\cbxwusr.dll (file missing)
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    ------------------------------------------
    faits ceci:
    https://leblogdeclaude.blogspot.com/2007/03/informatique-procdure-navifix.html
    --------------------------
    0
    1. Adam94 Messages postés 154 Statut Membre 1
       
      Bonsoir philo voila le rapport Navilog.


      Fix lancé depuis C:\Program Files\navilog1
      Mise a jour le 17.05.2007 a 23h00 by IL-MAFIOSO

      Executé en mode normal

      *** Recherche Programmes installes ***




      *** Recherche dossiers dans C:\WINDOWS ***




      *** Recherche dossiers dans C:\Program Files ***




      *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




      *** Recherche dossiers dans C:\Documents and Settings\Compaq_Propri‚taire\Application Data ***



      *** Recherche avec BlackLight Engine/F-secure ***
      BlackLight Engine est un produit de F-secure, pour + d'infos :
      https://www.f-secure.com/en


      F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
      ======================================

      Copyright 2005-2006 F-Secure Corporation. All rights reserved.
      This is a beta version. It will expire on 1st of April, 2007.
      Version information: 2.2.1061.

      [+] Started on 06/05/07 at 13:22:47.
      [+] Initializing ...
      [+] Starting scan, press Ctrl-C to abort.
      [+] Scanning for hidden items ................................................................................
      [+] Scan complete.
      [+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
      [+] Exited on 06/05/07 at 13:30:57 (return code = 0).


      *** Recherche fichiers ***




      *** Recherche cles registre ***


      Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]



      Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]



      Recherche Clé Magic Control



      *** Module de Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Recherche fichiers connus:

      C:\WINDOWS\system32\lnnmp.ini2 trouvé ! infection Vundo possible non traité par cet outil !

      2)Recherche Heuristique :
      *
      **
      ***
      ****
      *****
      ******
      *******
      ********


      *** Analyse Terminé le 05/06/2007 à 13:31:28,20 ***
      0
  9. Utilisateur anonyme
     
    Le log est clean.
    comment se comporte ton PC ?
    0
    1. Adam94 Messages postés 154 Statut Membre 1
       
      Ben jpense qu'il tourne correctement . Il n'y a plus de pages qui s'ouvrent sans que je le demande.
      0
  10. Utilisateur anonyme
     
    bien,
    fais ceci et postes le log.
    http://support.f-secure.fr/fra/home/ols.shtml
    0
    1. Adam94 Messages postés 154 Statut Membre 1
       
      Bonsoir philo voila le log F-secure et merci encore.

      Result: 23 malware found
      ClickSpring (spyware)

      * System (Disinfected)

      JS/Linker.V@troj (virus)

      * C:\DOCUMENTS AND SETTINGS\COMPAQ_PROPRI�TAIRE\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\LPMOSNGG.DEFAULT\CACHE(2)\298E10C1D01 (Submitted)
      * C:\DOCUMENTS AND SETTINGS\COMPAQ_PROPRI�TAIRE\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\LPMOSNGG.DEFAULT\CACHE(2)\29BE10C1D01 (Submitted)
      * C:\DOCUMENTS AND SETTINGS\COMPAQ_PROPRI�TAIRE\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\LPMOSNGG.DEFAULT\CACHE(2)\69BE10C1D01 (Submitted)
      * C:\DOCUMENTS AND SETTINGS\COMPAQ_PROPRI�TAIRE\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\LPMOSNGG.DEFAULT\CACHE(2)\69CE10C1D01 (Submitted)
      * C:\DOCUMENTS AND SETTINGS\COMPAQ_PROPRI�TAIRE\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\LPMOSNGG.DEFAULT\CACHE(2)\69DE10C1D01 (Submitted)
      * C:\DOCUMENTS AND SETTINGS\COMPAQ_PROPRI�TAIRE\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\LPMOSNGG.DEFAULT\CACHE(2)\69FE10C1D01 (Submitted)

      Tracking Cookie (spyware)

      * System (Disinfected)
      * System
      * System
      * System
      * System

      Trojan-Downloader.MSIL.Agent.c (virus)

      * C:\WINDOWS\SYSTEM32\CRUNNER\CRUNNER.EXE (Renamed & Submitted)

      Trojan.Win32.Agent.anr (virus)

      * C:\WINDOWS\SYSTEM32\ARLJTXDL.EXE (Renamed & Submitted)
      * C:\WINDOWS\SYSTEM32\ENEDHWOV.EXE (Renamed & Submitted)
      * C:\WINDOWS\SYSTEM32\MAWPAMKS.EXE (Renamed & Submitted)

      Trojan.Win32.BHO.bd (virus)

      * C:\PROGRAM FILES\HIJACKTHIS VERSION FRAN�AISE\BACKUPS\BACKUP-20070602-004650-511.DLL (Renamed & Submitted)
      * C:\PROGRAM FILES\HIJACKTHIS VERSION FRAN�AISE\BACKUPS\BACKUP-20070602-230524-267.DLL (Renamed & Submitted)

      Trojan.Win32.Dialer.qn (virus)

      * C:\WINDOWS\SYSTEM32\WINWLY32.DLL (Renamed & Submitted)
      * C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\SYMANTEC\NORTON ANTIVIRUS\QUARANTINE\678E3F06.EXE (Renamed & Submitted)

      Vundo.gen26 (virus)

      * C:\WINDOWS\SYSTEM32\GEBYV.DLL (Submitted)
      * C:\PROGRAM FILES\HIJACKTHIS VERSION FRAN�AISE\BACKUPS\BACKUP-20070602-004650-233.DLL (Submitted)
      * C:\PROGRAM FILES\HIJACKTHIS VERSION FRAN�AISE\BACKUPS\BACKUP-20070602-230524-792.DLL (Submitted)

      Statistics
      Scanned:

      * Files: 50559
      * System: 5392
      * Not scanned: 3

      Actions:

      * Disinfected: 2
      * Renamed: 8
      * Deleted: 0
      * None: 13
      * Submitted: 17

      Files not scanned:

      * C:\HIBERFIL.SYS
      * C:\PAGEFILE.SYS
      * C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT

      Options
      Scanning engines:

      * F-Secure Libra: 2.4.2, 2007-06-06
      * F-Secure AVP: 7.0.171, 2007-06-06
      * F-Secure Orion: 1.2.37, 2007-06-06
      * F-Secure Blacklight: 1.0.53
      * F-Secure Draco: 1.0.35, 0260-23-12
      * F-Secure Pegasus: 1.19.0, 2007-04-28

      Scanning options:

      * Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB BAT LNK ANI AVB CEO CMD LSP MAP MHT MIF PDF PHP POT WMF NWS TAR TGZ WSF ZL? {* ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
      * Use Advanced heuristics
      0
  11. Utilisateur anonyme
     
    bien, reposte un log Hijackthis.
    0
    1. Adam94 Messages postés 154 Statut Membre 1
       
      Bonsoir philo voila le log Hijackthis.Merci encore


      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\UAService7.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.huddi.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: BlueSoleil.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - https://www.f-secure.com/en/home/support
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exe
      O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
      0
  12. Utilisateur anonyme
     
    coches + fixer cette ligne
    --------------------------------------------------
    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    --------------------------------------
    ce log est clean de virus.
    Comment va ton PC, en fait ?

    0
    1. Adam94 Messages postés 154 Statut Membre 1
       
      Bonjour philo j'ai fixé la ligne que tu m'a dit et mon pc se comporte normalement maintenant merci beaucoup.
      Es que tu peut me préciser qu'elle etait le problème? merci encore
      0
  14. Utilisateur anonyme
     
    reçu,
    si tu as un soucis tu n'hésites pas.
    cordialement
    0

Discussions similaires

Infection
toast3r -
toast3r -

44 réponses
infection
céline0034 -
totobetourne -

12 réponses
problème infection ?
emma -
juju666 -

76 réponses
Erreur Perflib recurente dans l' event.
Christian -
Christian -

2 réponses
Avast detecte une menace "infection URL:MAL"
elbreton -
cloclomaz -

36 réponses