Infecte par virus
nathnoumea
Messages postés
6
Statut
Membre
-
pmolik 89 Messages postés 5 Statut Membre -
pmolik 89 Messages postés 5 Statut Membre -
Bonjour,
merci Lulu69 grace a toi et au site cela ne s affiche plus
Tu peux peut etre m aider encore car je suis infecté par un virus win 32 j ai pu faire le rapport grace hijackThis voila le rapport :
Logfile of HijackThis v1.99.1
Scan saved at 13:43:39, on 17/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\ANTI VIRUS\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\spoo1sv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\ANTI VIRUS\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\AdVantage\AdVantage.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\ANTI VIRUS\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://client.jogo.cn/cdn/browser/sidesearch/sidesearch-en.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://client.jogo.cn/cdn/browser/customsearch/customsearch-en.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing)
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IdnSvr] C:\Program Files\OCINS\idnsvr.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\ANTI VIRUS\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [AdVantage] "C:\Program Files\AdVantage\AdVantage.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O8 - Extra context menu item: &Access Internet Keyword - C:\Program Files\OCINS\cnrbtn.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?553150a43889452d9a6e8e05c8082dd7
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?553150a43889452d9a6e8e05c8082dd7
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://lagachettelapinou.spaces.live.com/PhotoUpload/MsnPUpld.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\ANTI VIRUS\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Windows Management PrintSystem (spoo1sv) - Unknown owner - C:\WINDOWS\SYSTEM32\spoo1sv.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
j ai avast comme anti virus plus Avg anti spyware
avs a detecte Win 32-trojan-gen ds fichier c : \programm files\ocins\idnsvr.exe
ou dans le fichier C:\windows\system32\driver\cnprov.sys
de plus il y a aussi le win 32-adware-gen dans fichier c:\programm files\advantage\tr Ill
aussi ds c:\programm files\ocins\ieaux.dll
ou dans ocin\idnsvr.exe
ou dans ocins\cndsv.dell et dans ocins\austr.dll et ocin\cnprovh.dll
il ne peut rien faire...
J ai l impression que c est une grosse infection !!!!! pourtant je suis infirmière mais là ce n est pas mon champs de compétences....
merci a tous ceux qui pourront m aider....
merci Lulu69 grace a toi et au site cela ne s affiche plus
Tu peux peut etre m aider encore car je suis infecté par un virus win 32 j ai pu faire le rapport grace hijackThis voila le rapport :
Logfile of HijackThis v1.99.1
Scan saved at 13:43:39, on 17/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\ANTI VIRUS\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\spoo1sv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\ANTI VIRUS\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\AdVantage\AdVantage.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\ANTI VIRUS\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://client.jogo.cn/cdn/browser/sidesearch/sidesearch-en.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://client.jogo.cn/cdn/browser/customsearch/customsearch-en.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing)
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IdnSvr] C:\Program Files\OCINS\idnsvr.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\ANTI VIRUS\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [AdVantage] "C:\Program Files\AdVantage\AdVantage.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O8 - Extra context menu item: &Access Internet Keyword - C:\Program Files\OCINS\cnrbtn.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?553150a43889452d9a6e8e05c8082dd7
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?553150a43889452d9a6e8e05c8082dd7
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://lagachettelapinou.spaces.live.com/PhotoUpload/MsnPUpld.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\ANTI VIRUS\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Windows Management PrintSystem (spoo1sv) - Unknown owner - C:\WINDOWS\SYSTEM32\spoo1sv.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
j ai avast comme anti virus plus Avg anti spyware
avs a detecte Win 32-trojan-gen ds fichier c : \programm files\ocins\idnsvr.exe
ou dans le fichier C:\windows\system32\driver\cnprov.sys
de plus il y a aussi le win 32-adware-gen dans fichier c:\programm files\advantage\tr Ill
aussi ds c:\programm files\ocins\ieaux.dll
ou dans ocin\idnsvr.exe
ou dans ocins\cndsv.dell et dans ocins\austr.dll et ocin\cnprovh.dll
il ne peut rien faire...
J ai l impression que c est une grosse infection !!!!! pourtant je suis infirmière mais là ce n est pas mon champs de compétences....
merci a tous ceux qui pourront m aider....
A voir également:
- Infecte par virus
- Virus mcafee - Accueil - Piratage
- Virus facebook demande d'amis - Accueil - Facebook
- Virus informatique - Guide
- Panda anti virus gratuit - Télécharger - Antivirus & Antimalwares
- Undisclosed-recipients virus - Guide
10 réponses
3 solutions
- mettre les fichiers en quarantaine (si possible)
- ou aller sur le site de ton anti-virus il donne des instructions pour la suppression des virus
- ou formater ton pc et le refaire a neuf
- mettre les fichiers en quarantaine (si possible)
- ou aller sur le site de ton anti-virus il donne des instructions pour la suppression des virus
- ou formater ton pc et le refaire a neuf
slt win 32 c est vraiment une plaie, estce que tu telecharge beaucoup sur p to peer. essaye executer puis tape mrt et suit les instructions.
en principe ça marche j ai deppanner pas mal comme ça
en principe ça marche j ai deppanner pas mal comme ça
SLT SPORT83 JE TELECHARGE SUR LIMEWIRE ET EMULE
JE NE COMPRENDS PAS TROP CE QUE DOIT FAIRE SI IL FAUT QUE JE TELECHARGE P TO PEER???? DIT MOI TOUT ça et merci pour ton aide
JE NE COMPRENDS PAS TROP CE QUE DOIT FAIRE SI IL FAUT QUE JE TELECHARGE P TO PEER???? DIT MOI TOUT ça et merci pour ton aide
re slt en faite j étais à l ouest.... j ai fait par exécuter mais il a rien détecté...
Je suis désespérée de voir tous ces virus....
Y a t il une solution ???? à part le formatage...
Aidez moi je sais plus quoi faire
Je suis désespérée de voir tous ces virus....
Y a t il une solution ???? à part le formatage...
Aidez moi je sais plus quoi faire
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
ne telecharge plus avec EMULE si tu veus etre tranquille c est le pire des p to p, avec lime wire il ne t ouvre jamais les fichiers infectés.
desinstale avg c est bidon et garde avast , si tu as 2 antivirus en meme temp tu n est pas sortie de l auberge,
le AVG dans le rapport corresponda à l'anti spyware et non à l'antivirus.
Donc il vaut mieux garder les deux.
Sinon pour revenir au pb, lors de la détection des virus Avast devrait proposer de supprimer, corriger ou mettre en quarantaine.
Essaye de corriger sinon mets en quarantaine.
Autre chose, je te conseille d'installer antivir car il est largement plus efficace qu'avast.
De plus dans ton rapport hijackthis, je n'ai pas l'impression que tu aies un firewall?!
Dans ce cas, il est malheureusement normal d'avoir chopé un virus (a fortiori plusieurs)
Il faut absolument en installer un comme zone alarm ou comodo.
Pour plus de détails voir les astuces de CCM.
Donc il vaut mieux garder les deux.
Sinon pour revenir au pb, lors de la détection des virus Avast devrait proposer de supprimer, corriger ou mettre en quarantaine.
Essaye de corriger sinon mets en quarantaine.
Autre chose, je te conseille d'installer antivir car il est largement plus efficace qu'avast.
De plus dans ton rapport hijackthis, je n'ai pas l'impression que tu aies un firewall?!
Dans ce cas, il est malheureusement normal d'avoir chopé un virus (a fortiori plusieurs)
Il faut absolument en installer un comme zone alarm ou comodo.
Pour plus de détails voir les astuces de CCM.
merci Zempachi d aider les novices de l informatique comme moi....
J ai donc supprimé avast et mis antivir
bizarre car il n a pas pu ouvrir 2 dossiers ci joint le rapport :
AntiVir PersonalEdition Classic
Report file date: samedi 19 janvier 2008 14:35
Scanning for 1056958 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: D8B7XD2J
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 03:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 02:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 05:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 02:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 04:27:15
ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 22:13:15
ANTIVIR2.VDF : 7.0.2.0 948736 Bytes 15/01/2008 22:13:15
ANTIVIR3.VDF : 7.0.2.20 225792 Bytes 18/01/2008 22:13:15
AVEWIN32.DLL : 7.6.0.48 3080704 Bytes 18/01/2008 22:13:16
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 00:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 17/07/2007 21:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 03:16:24
AVPACK32.DLL : 7.6.0.3 360488 Bytes 18/01/2008 22:13:18
AVREG.DLL : 7.0.1.6 30760 Bytes 17/07/2007 21:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 02:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 17/07/2007 21:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 01:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 02:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 02:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/07/2007 23:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: samedi 19 janvier 2008 14:35
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'RAC12.exe' - '1' Module(s) have been scanned
Scan process 'MediaDico12.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'FxSvr2.exe' - '1' Module(s) have been scanned
Scan process 'dllhost.exe' - '1' Module(s) have been scanned
Scan process 'mcrdsvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'AdVantage.exe' - '1' Module(s) have been scanned
Scan process 'netwaiting.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'LogiTray.exe' - '1' Module(s) have been scanned
Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned
Scan process 'avgas.exe' - '1' Module(s) have been scanned
Scan process 'idnsvr.exe' - '1' Module(s) have been scanned
Scan process 'RegSrvc.exe' - '1' Module(s) have been scanned
Scan process 'NicConfigSvc.exe' - '1' Module(s) have been scanned
Scan process 'ehSched.exe' - '1' Module(s) have been scanned
Scan process 'ehrecvr.exe' - '1' Module(s) have been scanned
Scan process 'CTSVCCDA.EXE' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '0' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'WLKEEPER.exe' - '1' Module(s) have been scanned
Scan process 'S24EvMon.exe' - '1' Module(s) have been scanned
Scan process 'EvtEng.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
43 processes with 43 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '21' files ).
Starting the file scan:
Begin scan in 'C:\' <Disque local>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\nath\tsp.exe
[DETECTION] Is the Trojan horse TR/Agent.188416
[INFO] The file was moved to '480170b6.qua'!
C:\Documents and Settings\nath\Local Settings\Temp\8A\cnprov.sys
[DETECTION] Contains detection pattern of the rootkit RKIT/Agent.192000
[INFO] The file was moved to '48017120.qua'!
C:\Program Files\MSReports\erep.dll
[DETECTION] Contains suspicious code HEUR/Crypted
[INFO] The file was moved to '47f6733f.qua'!
C:\Program Files\OCINS\update\data.cab
[0] Archive type: CAB (Microsoft)
--> cnrbtn.html
[DETECTION] Contains detection pattern of the Java script virus JS/Agent.BF
[INFO] The file was moved to '48057336.qua'!
C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP101\A0028867.sys
[DETECTION] Contains detection pattern of the rootkit RKIT/Agent.192000
[INFO] The file was moved to '47c17380.qua'!
C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP102\A0028992.exe
[DETECTION] Is the Trojan horse TR/Agent.188416
[INFO] The file was moved to '47c1738c.qua'!
C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP102\A0028997.exe
[DETECTION] Is the Trojan horse TR/Agent.188416
[INFO] The file was moved to '47c17394.qua'!
C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP102\A0028998.dll
[DETECTION] Contains suspicious code HEUR/Crypted
[INFO] The file was moved to '47c173a2.qua'!
C:\WINDOWS\system32\drivers\cnprov.sys
[DETECTION] Contains detection pattern of the rootkit RKIT/Agent.192000
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
Begin scan in 'D:\' <Sauvegarder>
End of the scan: samedi 19 janvier 2008 15:03
Used time: 27:38 min
The scan has been done completely.
4911 Scanning directories
157321 Files were scanned
7 viruses and/or unwanted programs were found
2 Files were classified as suspicious:
0 files were deleted
0 files were repaired
8 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
157314 Files not concerned
3044 Archives were scanned
3 Warnings
0 Notes
j ai aussi téléchargé Comodo
j ai l impression que antivir n a pas détecté le virus win32-adware-gen et le win 32 Trojan-gen
Les autres sont donc en quarantaine
Que dois je faire maintenant pour traiter ces virus
merci encore et a bientôt
J ai donc supprimé avast et mis antivir
bizarre car il n a pas pu ouvrir 2 dossiers ci joint le rapport :
AntiVir PersonalEdition Classic
Report file date: samedi 19 janvier 2008 14:35
Scanning for 1056958 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: D8B7XD2J
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 03:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 02:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 05:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 02:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 04:27:15
ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 22:13:15
ANTIVIR2.VDF : 7.0.2.0 948736 Bytes 15/01/2008 22:13:15
ANTIVIR3.VDF : 7.0.2.20 225792 Bytes 18/01/2008 22:13:15
AVEWIN32.DLL : 7.6.0.48 3080704 Bytes 18/01/2008 22:13:16
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 00:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 17/07/2007 21:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 03:16:24
AVPACK32.DLL : 7.6.0.3 360488 Bytes 18/01/2008 22:13:18
AVREG.DLL : 7.0.1.6 30760 Bytes 17/07/2007 21:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 02:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 17/07/2007 21:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 01:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 02:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 02:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/07/2007 23:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: samedi 19 janvier 2008 14:35
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'RAC12.exe' - '1' Module(s) have been scanned
Scan process 'MediaDico12.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'FxSvr2.exe' - '1' Module(s) have been scanned
Scan process 'dllhost.exe' - '1' Module(s) have been scanned
Scan process 'mcrdsvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'AdVantage.exe' - '1' Module(s) have been scanned
Scan process 'netwaiting.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'LogiTray.exe' - '1' Module(s) have been scanned
Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned
Scan process 'avgas.exe' - '1' Module(s) have been scanned
Scan process 'idnsvr.exe' - '1' Module(s) have been scanned
Scan process 'RegSrvc.exe' - '1' Module(s) have been scanned
Scan process 'NicConfigSvc.exe' - '1' Module(s) have been scanned
Scan process 'ehSched.exe' - '1' Module(s) have been scanned
Scan process 'ehrecvr.exe' - '1' Module(s) have been scanned
Scan process 'CTSVCCDA.EXE' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '0' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'WLKEEPER.exe' - '1' Module(s) have been scanned
Scan process 'S24EvMon.exe' - '1' Module(s) have been scanned
Scan process 'EvtEng.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
43 processes with 43 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '21' files ).
Starting the file scan:
Begin scan in 'C:\' <Disque local>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\nath\tsp.exe
[DETECTION] Is the Trojan horse TR/Agent.188416
[INFO] The file was moved to '480170b6.qua'!
C:\Documents and Settings\nath\Local Settings\Temp\8A\cnprov.sys
[DETECTION] Contains detection pattern of the rootkit RKIT/Agent.192000
[INFO] The file was moved to '48017120.qua'!
C:\Program Files\MSReports\erep.dll
[DETECTION] Contains suspicious code HEUR/Crypted
[INFO] The file was moved to '47f6733f.qua'!
C:\Program Files\OCINS\update\data.cab
[0] Archive type: CAB (Microsoft)
--> cnrbtn.html
[DETECTION] Contains detection pattern of the Java script virus JS/Agent.BF
[INFO] The file was moved to '48057336.qua'!
C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP101\A0028867.sys
[DETECTION] Contains detection pattern of the rootkit RKIT/Agent.192000
[INFO] The file was moved to '47c17380.qua'!
C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP102\A0028992.exe
[DETECTION] Is the Trojan horse TR/Agent.188416
[INFO] The file was moved to '47c1738c.qua'!
C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP102\A0028997.exe
[DETECTION] Is the Trojan horse TR/Agent.188416
[INFO] The file was moved to '47c17394.qua'!
C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP102\A0028998.dll
[DETECTION] Contains suspicious code HEUR/Crypted
[INFO] The file was moved to '47c173a2.qua'!
C:\WINDOWS\system32\drivers\cnprov.sys
[DETECTION] Contains detection pattern of the rootkit RKIT/Agent.192000
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
Begin scan in 'D:\' <Sauvegarder>
End of the scan: samedi 19 janvier 2008 15:03
Used time: 27:38 min
The scan has been done completely.
4911 Scanning directories
157321 Files were scanned
7 viruses and/or unwanted programs were found
2 Files were classified as suspicious:
0 files were deleted
0 files were repaired
8 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
157314 Files not concerned
3044 Archives were scanned
3 Warnings
0 Notes
j ai aussi téléchargé Comodo
j ai l impression que antivir n a pas détecté le virus win32-adware-gen et le win 32 Trojan-gen
Les autres sont donc en quarantaine
Que dois je faire maintenant pour traiter ces virus
merci encore et a bientôt
salut a tous,commetout le monde j'ai debuté dans l'informatique mon premier antivirus securitoo une grosse daube,par contre leur,
scan en ligne,est efficace,maintenant j'ai bitdefender pour le p2p c'est genial,souvent les virus sont dans les fichier zip,si par malheur tu telecharge un fichier infecté il te le met directement en quarentaine tu vas sur quarentaine tu le suprime le tour est joué
scan en ligne,est efficace,maintenant j'ai bitdefender pour le p2p c'est genial,souvent les virus sont dans les fichier zip,si par malheur tu telecharge un fichier infecté il te le met directement en quarentaine tu vas sur quarentaine tu le suprime le tour est joué
