Avast-Il y a trop de mails identiques

l'autre -  
 l'autre -
Bonjour,

Depuis peu de temps, Avast analyse des mails sortants en permanence et affiche une alerte toutes les 5 à 10 secondes disant:
"Il y a trop de mails identiques envoyés dans un faible intervalle de temps "
depuis que j'ai mis la protection résidente 'élevée" sur le courrier électronique.

J'ai fais divers scan et essayé d'installé spybot, mais toujours le même problème.

Je ne sais pas comment me débarrasser de ces mails-fantomes !

Merci de votre aide.

Ci-joint mon log HijackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:52:30, on 26/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\Program Files\Tech\Office Program Selector\2.0\ACROMAPP.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\inKline Global\PC Booster\PCBooster.exe
C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
C:\Program Files\MarkAny\ContentSafer\MAAgent.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\progra~1\fichie~1\instal~1\update~1\issch.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\highjackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://fr.search.yahoo.com/?fr=cb-hp06
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://fr.search.yahoo.com/?fr=cb-hp06
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ACROMOUSE] C:\Program Files\Tech\Office Program Selector\2.0\ACROMAPP.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PC Booster] C:\Program Files\inKline Global\PC Booster\PCBooster.exe
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [MAAgent] C:\Program Files\MarkAny\ContentSafer\MAAgent.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ISUSScheduler] "c:\progra~1\fichie~1\instal~1\update~1\issch.exe" -start
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\ms office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MSOFFI~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/bingame/popcaploader_v10.cab
O20 - Winlogon Notify: neth32 - C:\WINDOWS\SYSTEM32\neth32.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O24 - Desktop Component 1: Aqua Garden - 6423CD5F-D089-4BF1-88B6-6A359339DAFF

--
End of file - 11210 bytes
Configuration: Windows XP
Internet Explorer 7.0

6 réponses

  1.
    al_nightwolf Messages postés 209 Statut Membre 16
     
    salut il y a un grand danger car quand on t'envoiyer beaucoup de mail ton compte msn s"explose alors les nouveau log de piratage utilise cette façons: envoiyer beaucouip de mail et idantique singifie rassure ce que je te dit car le log envoie le meme mail 10^19 fois ou plus
    10^19 = 100000000000000000000000000000000000000 (19 zeros)
    0
    1. l'autre
       
      Salut à toi,

      excuse moi, mais je crains de ne pas comprendre !
      0
  2. al_nightwolf Messages postés 209 Statut Membre 16
     
    on voudrez bombarder ton msn suprimme les messages
    0
    1. l'autre
       
      Salut,

      j'ai supprimé les messages de la boite de réception Msn, mais rien à faire,
      j'ai toujours les alertes Avast!

      Que faire ?
      0
      1. shinobi80 Messages postés 918 Statut Membre 73 > l'autre
         
        salut!
        d abord supprime avast avec ca:Désinstaller proprement avast
        ensuite telecharge antivir qui est bien mieux:AntiVir
        en anglais mais bien plus efficace.
        dis moi
        0
      2. shinobi80 Messages postés 918 Statut Membre 73 > shinobi80 Messages postés 918 Statut Membre
         
        scan avec antivir.puis ceci:Méthode préliminaire de désinfection - Version Fr
        0
      3. l'autre > shinobi80 Messages postés 918 Statut Membre
         
        Salut et merçi de ton aide précieuse

        Comme indiqué,j'ai désinstallé avast! et installé Antivir, mais faut il que je garde Spybot ?
        Aprés j'ai fait un scan avec :
        -C-cleaner,
        -AntiVir (rapport joint)

        Ensuite je ferai bitdefender et hijackthis


        Avira AntiVir Personal
        Report file date: samedi 26 avril 2008 18:18

        Scanning for 1237787 virus strains and unwanted programs.

        Licensed to: Avira AntiVir PersonalEdition Classic
        Serial number: 0000149996-ADJIE-0001
        Platform: Windows XP
        Windows version: (Service Pack 2) [5.1.2600]
        Boot mode: Normally booted
        Username: SYSTEM
        Computer name: SEBASTIEN

        Version information:
        BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
        AVSCAN.EXE : 8.1.2.12 311553 Bytes 26/04/2008 16:11:54
        AVSCAN.DLL : 8.1.1.0 53505 Bytes 26/04/2008 16:11:54
        LUKE.DLL : 8.1.2.9 151809 Bytes 26/04/2008 16:11:55
        LUKERES.DLL : 8.1.2.1 12033 Bytes 26/04/2008 16:11:55
        ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:27:15
        ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 16:11:55
        ANTIVIR2.VDF : 7.0.3.197 1260032 Bytes 22/04/2008 16:11:56
        ANTIVIR3.VDF : 7.0.3.216 137216 Bytes 25/04/2008 16:11:56
        Engineversion : 8.1.0.35
        AEVDF.DLL : 8.1.0.5 102772 Bytes 26/04/2008 16:11:56
        AESCRIPT.DLL : 8.1.0.27 233851 Bytes 26/04/2008 16:11:56
        AESCN.DLL : 8.1.0.14 119156 Bytes 26/04/2008 16:11:56
        AERDL.DLL : 8.1.0.20 418165 Bytes 26/04/2008 16:11:56
        AEPACK.DLL : 8.1.1.2 364917 Bytes 26/04/2008 16:11:56
        AEOFFICE.DLL : 8.1.0.18 192890 Bytes 26/04/2008 16:11:56
        AEHEUR.DLL : 8.1.0.20 1196406 Bytes 26/04/2008 16:11:56
        AEHELP.DLL : 8.1.0.14 115063 Bytes 26/04/2008 16:11:56
        AEGEN.DLL : 8.1.0.18 299381 Bytes 26/04/2008 16:11:56
        AEEMU.DLL : 8.1.0.5 430450 Bytes 26/04/2008 16:11:56
        AECORE.DLL : 8.1.0.27 168310 Bytes 26/04/2008 16:11:56
        AVWINLL.DLL : 1.0.0.7 14593 Bytes 26/04/2008 16:11:54
        AVPREF.DLL : 8.0.0.1 25857 Bytes 26/04/2008 16:11:54
        AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 12:16:24
        AVREG.DLL : 8.0.0.0 30977 Bytes 26/04/2008 16:11:54
        AVARKT.DLL : 1.0.0.23 307457 Bytes 26/04/2008 16:11:54
        AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 26/04/2008 16:11:54
        SQLITE3.DLL : 3.3.17.1 339968 Bytes 26/04/2008 16:11:55
        SMTPLIB.DLL : 1.2.0.19 28929 Bytes 26/04/2008 16:11:55
        NETNT.DLL : 8.0.0.1 7937 Bytes 26/04/2008 16:11:55
        RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 26/04/2008 16:11:51
        RCTEXT.DLL : 8.0.32.0 86273 Bytes 26/04/2008 16:11:51

        Configuration settings for the scan:
        Jobname..........................: Complete system scan
        Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
        Logging..........................: low
        Primary action...................: interactive
        Secondary action.................: ignore
        Scan master boot sector..........: on
        Scan boot sector.................: on
        Boot sectors.....................: C:, D:,
        Scan memory......................: on
        Process scan.....................: on
        Scan registry....................: on
        Search for rootkits..............: off
        Scan all files...................: Intelligent file selection
        Scan archives....................: on
        Recursion depth..................: 20
        Smart extensions.................: on
        Macro heuristic..................: on
        File heuristic...................: medium

        Start of the scan: samedi 26 avril 2008 18:18

        The scan of running processes will be started
        Scan process 'avscan.exe' - '1' Module(s) have been scanned
        Scan process 'avcenter.exe' - '1' Module(s) have been scanned
        Scan process 'sched.exe' - '1' Module(s) have been scanned
        Scan process 'avgnt.exe' - '1' Module(s) have been scanned
        Scan process 'avguard.exe' - '1' Module(s) have been scanned
        Scan process 'agent.exe' - '1' Module(s) have been scanned
        Scan process 'ISUSPM.exe' - '1' Module(s) have been scanned
        Scan process 'WLLoginProxy.exe' - '1' Module(s) have been scanned
        Scan process 'iexplore.exe' - '1' Module(s) have been scanned
        Scan process 'hpsysdrv.exe' - '1' Module(s) have been scanned
        Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
        Scan process 'kbd.exe' - '1' Module(s) have been scanned
        Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
        Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
        Scan process 'alg.exe' - '1' Module(s) have been scanned
        Scan process 'MMonitor.exe' - '1' Module(s) have been scanned
        Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
        Scan process 'msmsgs.exe' - '1' Module(s) have been scanned
        Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
        Scan process 'issch.exe' - '1' Module(s) have been scanned
        Scan process 'MSASCui.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'StarWindService.exe' - '1' Module(s) have been scanned
        Scan process 'MaAgent.exe' - '1' Module(s) have been scanned
        Scan process 'SMSTray.exe' - '1' Module(s) have been scanned
        Scan process 'PCBooster.exe' - '1' Module(s) have been scanned
        Scan process 'qttask.exe' - '1' Module(s) have been scanned
        Scan process 'ACROMAPP.EXE' - '1' Module(s) have been scanned
        Scan process 'E_FATIADE.EXE' - '1' Module(s) have been scanned
        Scan process 'CloneCDTray.exe' - '1' Module(s) have been scanned
        Scan process 'jusched.exe' - '1' Module(s) have been scanned
        Scan process 'realsched.exe' - '1' Module(s) have been scanned
        Scan process 'VM_STI.EXE' - '1' Module(s) have been scanned
        Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned
        Scan process 'sqlservr.exe' - '1' Module(s) have been scanned
        Scan process 'RTHDCPL.EXE' - '1' Module(s) have been scanned
        Scan process 'DkService.exe' - '1' Module(s) have been scanned
        Scan process 'explorer.exe' - '1' Module(s) have been scanned
        Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
        Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
        Scan process 'ashServ.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
        Scan process 'lsass.exe' - '1' Module(s) have been scanned
        Scan process 'services.exe' - '1' Module(s) have been scanned
        Scan process 'winlogon.exe' - '1' Module(s) have been scanned
        Scan process 'csrss.exe' - '1' Module(s) have been scanned
        Scan process 'smss.exe' - '1' Module(s) have been scanned
        54 processes with 54 modules were scanned

        Starting master boot sector scan:
        Master boot sector HD0
        [INFO] No virus was found!
        Master boot sector HD1
        [INFO] No virus was found!
        [WARNING] Le périphérique n'est pas prêt.
        Master boot sector HD2
        [INFO] No virus was found!
        [WARNING] Le périphérique n'est pas prêt.
        Master boot sector HD3
        [INFO] No virus was found!
        [WARNING] Le périphérique n'est pas prêt.
        Master boot sector HD4
        [INFO] No virus was found!
        [WARNING] Le périphérique n'est pas prêt.

        Start scanning boot sectors:
        Boot sector 'C:\'
        [INFO] No virus was found!
        Boot sector 'D:\'
        [INFO] No virus was found!

        Starting to scan the registry.
        C:\WINDOWS\system32\neth32.dll
        [DETECTION] Is the Trojan horse TR/Hijacker.Gen
        [WARNING] An error has occurred and the file was not deleted. ErrorID: 26003
        [WARNING]

        The registry was scanned ( '35' files ).


        Starting the file scan:

        Begin scan in 'C:\' <seb>
        C:\pagefile.sys
        [WARNING] The file could not be opened!
        C:\Documents and Settings\Compaq_Propriétaire\Bureau\programmes\(ES) DFX 8\install\RealPlayer RealOne\keygen\Key.exe
        [DETECTION] Is the Trojan horse TR/Small.142336.B
        [NOTE] The file was moved to '488c5728.qua'!
        C:\Documents and Settings\Compaq_Propriétaire\Bureau\programmes\(ES) DFX 8\install\Windows Media Player\keygen\Key.exe
        [DETECTION] Is the Trojan horse TR/Small.142336.C
        [NOTE] The file was moved to '488c572e.qua'!
        C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\IM\Identities\{D8C70224-DD69-4870-8D79-69EA78DC9B88}\Message Store\Attachments\(ES) DFX 8.rar
        [0] Archive type: RAR
        --> (ES) DFX 8\install\RealPlayer RealOne\keygen\Key.exe
        [DETECTION] Is the Trojan horse TR/Small.142336.B
        --> (ES) DFX 8\install\River Media Center JukeBox\keygen\key.exe
        [DETECTION] Is the Trojan horse TR/Delf.121344
        --> (ES) DFX 8\install\Windows Media Player\keygen\Key.exe
        [DETECTION] Is the Trojan horse TR/Small.142336.C
        [NOTE] The file was moved to '48665798.qua'!
        C:\Program Files\GameHouse\Magic Ball 2\MagicBall2.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [NOTE] The file was moved to '487a5bdd.qua'!
        C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP674\A0071732.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
        [NOTE] The file was moved to '4843648e.qua'!
        C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082660.exe
        [DETECTION] Is the Trojan horse TR/Small.142336.B
        [NOTE] The file was moved to '48436589.qua'!
        C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082661.exe
        [DETECTION] Is the Trojan horse TR/Small.142336.C
        [NOTE] The file was moved to '4843658c.qua'!
        C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082662.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [NOTE] The file was moved to '4843658f.qua'!
        C:\WINDOWS\system32\neth32.dll
        [DETECTION] Is the Trojan horse TR/Hijacker.Gen
        [WARNING] An error has occurred and the file was not deleted. ErrorID: 26003
        [WARNING]
        C:\WINDOWS\system32\drivers\sptd.sys
        [WARNING] The file could not be opened!
        Begin scan in 'D:\' <WINDOWS>


        End of the scan: samedi 26 avril 2008 19:44
        Used time: 1:26:44 min

        The scan has been done completely.

        22366 Scanning directories
        626492 Files were scanned
        12 viruses and/or unwanted programs were found
        0 Files were classified as suspicious:
        0 files were deleted
        0 files were repaired
        8 files were moved to quarantine
        0 files were renamed
        2 Files cannot be scanned
        626480 Files not concerned
        14671 Archives were scanned
        8 Warnings
        8 Notes
        0
  3. shinobi80 Messages postés 918 Statut Membre 73
     
    oui tu peut garder spybot.
    tu as 8fichiers infectes que tu as placer en quarantaine,tu peut les supprimer.
    0
    1. l'autre
       
      Ca y est, j'ai supprimé la zone de quarantaine.
      je continue avec bitdefender
      0
  4. l'autre
     
    Et voici le (enfin) rapport de bitdefender:

    BitDefender Online Scanner
    Scan report generated at: Sat, Apr 26, 2008 - 22:35:32

    Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;K:\;

    Statistics
    Time 02:11:59
    Files 615869
    Folders 22363
    Boot Sectors 3
    Archives 15887
    Packed Files 32068

    Results
    Identified Viruses 4
    Infected Files 38
    Suspect Files 0
    Warnings 0
    Disinfected 0
    Deleted Files 38

    Engines Info
    Virus Definitions 1183789
    Engine build AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
    Scan plugins 16
    Archive plugins 42
    Unpack plugins 7
    E-mail plugins 6
    System plugins 5

    Scan Settings
    First Action Disinfect
    Second Action Delete
    Heuristics Yes
    Enable Warnings Yes
    Scanned Extensions *;
    Exclude Extensions
    Scan Emails Yes
    Scan Archives Yes
    Scan Packed Yes
    Scan Files Yes
    Scan Boot Yes

    Scanned File Status
    C:\Program Files\Alice Greenfingers\ReflexiveArcade\ReflexiveArcade.dll Infected with: Trojan.Generic.219631
    C:\Program Files\Alice Greenfingers\ReflexiveArcade\ReflexiveArcade.dll Deleted
    C:\Program Files\Coffee Rush\Uninstall.exe Infected with: Packer.Krunchy.A
    C:\Program Files\Coffee Rush\Uninstall.exe Disinfection failed
    C:\Program Files\Coffee Rush\Uninstall.exe Deleted
    C:\Program Files\Fishing Craze\Uninstall.exe Infected with: Packer.Krunchy.A
    C:\Program Files\Fishing Craze\Uninstall.exe Disinfection failed
    C:\Program Files\Fishing Craze\Uninstall.exe Deleted
    C:\Program Files\Hot Dish\Uninstall.exe Infected with: Packer.Krunchy.A
    C:\Program Files\Hot Dish\Uninstall.exe Disinfection failed
    C:\Program Files\Hot Dish\Uninstall.exe Deleted
    C:\Program Files\Magic Farm\Uninstall.exe Infected with: Packer.Krunchy.A
    C:\Program Files\Magic Farm\Uninstall.exe Disinfection failed
    C:\Program Files\Magic Farm\Uninstall.exe Deleted
    C:\Program Files\Magic Seeds\Uninstall.exe Infected with: Packer.Krunchy.A
    C:\Program Files\Magic Seeds\Uninstall.exe Disinfection failed
    C:\Program Files\Magic Seeds\Uninstall.exe Deleted
    C:\Program Files\PlayFirst\Diner Dash - Flo On The Go\Diner Dash - Flo On The Go.exe Infected with: Backdoor.Bot.4467
    C:\Program Files\PlayFirst\Diner Dash - Flo On The Go\Diner Dash - Flo On The Go.exe Deleted
    C:\Program Files\Spandex Force\Uninstall.exe Infected with: Packer.Krunchy.A
    C:\Program Files\Spandex Force\Uninstall.exe Disinfection failed
    C:\Program Files\Spandex Force\Uninstall.exe Deleted
    C:\Program Files\Sunset Studio Deluxe\Uninstall.exe Infected with: Packer.Krunchy.A
    C:\Program Files\Sunset Studio Deluxe\Uninstall.exe Disinfection failed
    C:\Program Files\Sunset Studio Deluxe\Uninstall.exe Deleted
    C:\Program Files\The Great Tree\Uninstall.exe Infected with: Packer.Krunchy.A
    C:\Program Files\The Great Tree\Uninstall.exe Disinfection failed
    C:\Program Files\The Great Tree\Uninstall.exe Deleted
    C:\Program Files\The Price Is Right\Uninstall.exe Infected with: Packer.Krunchy.A
    C:\Program Files\The Price Is Right\Uninstall.exe Disinfection failed
    C:\Program Files\The Price Is Right\Uninstall.exe Deleted
    C:\Program Files\Uninstall.exe Infected with: Packer.Krunchy.A
    C:\Program Files\Uninstall.exe Disinfection failed
    C:\Program Files\Uninstall.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP668\A0071523.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP668\A0071523.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP668\A0071523.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP674\A0071764.exe Detected with: Adware.Casino.V
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP674\A0071764.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP707\A0074925.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP707\A0074925.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP707\A0074925.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP707\A0074926.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP707\A0074926.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP707\A0074926.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP709\A0079906.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP709\A0079906.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP709\A0079906.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP712\A0080062.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP712\A0080062.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP712\A0080062.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP713\A0080136.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP713\A0080136.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP713\A0080136.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP713\A0080137.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP713\A0080137.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP713\A0080137.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP713\A0080138.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP713\A0080138.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP713\A0080138.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081324.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081324.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081324.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081325.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081325.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081325.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081326.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081326.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081326.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081334.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081334.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081334.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081335.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081335.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP735\A0081335.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082714.dll Infected with: Trojan.Generic.219631
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082714.dll Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082715.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082715.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082715.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082716.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082716.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082716.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082717.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082717.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082717.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082718.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082718.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082718.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082719.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082719.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082719.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082720.exe Infected with: Backdoor.Bot.4467
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082720.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082721.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082721.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082721.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082722.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082722.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082722.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082723.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082723.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082723.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082724.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082724.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082724.exe Deleted
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082725.exe Infected with: Packer.Krunchy.A
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082725.exe Disinfection failed
    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP738\A0082725.exe Deleted
    0
    1. shinobi80 Messages postés 918 Statut Membre 73
       
      ok.maintenant tu fais hijackthis.et tu poste dans un autre tuto avec en titre: analyse hijackthis.un specialiste d hijackthis viendra t aider
      a+
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. l'autre
     
    Et pour finir, voici le rapport de hijackthis et peut-etre le bout du tunnel:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:49:54, on 26/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    C:\WINDOWS\VM_STI.EXE
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
    C:\Program Files\Tech\Office Program Selector\2.0\ACROMAPP.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\inKline Global\PC Booster\PCBooster.exe
    C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
    C:\Program Files\MarkAny\ContentSafer\MAAgent.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\progra~1\fichie~1\instal~1\update~1\issch.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\PROGRA~1\INCRED~1\bin\IMApp.exe
    C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    c:\windows\system\hpsysdrv.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Documents and Settings\Compaq_Propriétaire\Bureau\highjackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://fr.search.yahoo.com/?fr=cb-hp06
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://fr.search.yahoo.com/?fr=cb-hp06
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.neuf.fr/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
    O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
    O4 - HKLM\..\Run: [ACROMOUSE] C:\Program Files\Tech\Office Program Selector\2.0\ACROMAPP.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [PC Booster] C:\Program Files\inKline Global\PC Booster\PCBooster.exe
    O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
    O4 - HKLM\..\Run: [MAAgent] C:\Program Files\MarkAny\ContentSafer\MAAgent.exe
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
    O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [ISUSScheduler] "c:\progra~1\fichie~1\instal~1\update~1\issch.exe" -start
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
    O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\ms office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MSOFFI~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/bingame/popcaploader_v10.cab
    O20 - Winlogon Notify: neth32 - neth32.dll (file missing)
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    O24 - Desktop Component 1: Aqua Garden - 6423CD5F-D089-4BF1-88B6-6A359339DAFF
    0
    1. shinobi80 Messages postés 918 Statut Membre 73
       
      poste ce rapport dans un nouveau sujet!
      suis pas un lecteur hijackthis
      0

Discussions similaires

Phishing faux mail d'avast
Colette34 -
Gerper -

2 réponses
Impossible de joindre Avast
soleil12 -
BZH -

8 réponses
Arnaque installation Avast Premium security
Eldanield -
bazfile -

9 réponses
arnaque de avast prelevement sans autorisation
petit -
Petittoune -

15 réponses
Prélèvement dri Avast software
Ml -
dadout -

2 réponses