Virus malware

Profil bloqué -  
 Profil bloqué -
Bonjour,
j'ai attrapper un virus aujourd'hui je crois du moins et j'ai essayer de m'en débarasser avec les conaissance que j'ai mais sa n'a rien donner j'ai plein de page d'antiviruse qui s'ouvre et des pages de cul aussi c'est vraiment fatiguant quand tu te trouve sur internet tes couper au 10 seconde bon j'ai faite marcher mon anti virus antivir personnalEdition classic
voici le raport :
Avira AntiVir Personal
Report file date: 7 mai 2008 16:36

Scanning for 1255113 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: Administrateur
Computer name: USER_AUTO

Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 2008-04-09 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 2008-04-16 13:16:22
AVSCAN.DLL : 8.1.1.0 53505 Bytes 2008-04-16 13:16:22
LUKE.DLL : 8.1.2.9 151809 Bytes 2008-04-16 13:16:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 2008-04-16 13:16:23
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 2007-07-18 19:27:15
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 2008-03-07 03:29:50
ANTIVIR2.VDF : 7.0.4.0 1554432 Bytes 2008-05-05 13:09:07
ANTIVIR3.VDF : 7.0.4.12 50688 Bytes 2008-05-07 13:08:38
Engineversion : 8.1.0.37
AEVDF.DLL : 8.1.0.5 102772 Bytes 2008-04-16 13:16:24
AESCRIPT.DLL : 8.1.0.28 233851 Bytes 2008-04-30 13:12:35
AESCN.DLL : 8.1.0.15 119157 Bytes 2008-04-30 13:12:34
AERDL.DLL : 8.1.0.20 418165 Bytes 2008-04-25 13:11:25
AEPACK.DLL : 8.1.1.4 364918 Bytes 2008-04-29 13:12:22
AEOFFICE.DLL : 8.1.0.18 192890 Bytes 2008-04-18 13:12:57
AEHEUR.DLL : 8.1.0.21 1196407 Bytes 2008-04-30 13:12:33
AEHELP.DLL : 8.1.0.14 115063 Bytes 2008-04-18 13:12:48
AEGEN.DLL : 8.1.0.18 299381 Bytes 2008-04-25 13:11:22
AEEMU.DLL : 8.1.0.5 430450 Bytes 2008-04-16 13:16:24
AECORE.DLL : 8.1.0.27 168310 Bytes 2008-04-18 13:12:33
AVWINLL.DLL : 1.0.0.7 14593 Bytes 2008-04-16 13:16:22
AVPREF.DLL : 8.0.0.1 25857 Bytes 2008-04-16 13:16:22
AVREP.DLL : 7.0.0.1 155688 Bytes 2007-04-16 18:16:24
AVREG.DLL : 8.0.0.0 30977 Bytes 2008-04-16 13:16:22
AVARKT.DLL : 1.0.0.23 307457 Bytes 2008-04-16 13:16:21
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 2008-04-16 13:16:21
SQLITE3.DLL : 3.3.17.1 339968 Bytes 2008-04-16 13:16:24
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 2008-04-16 13:16:24
NETNT.DLL : 8.0.0.1 7937 Bytes 2008-04-16 13:16:23
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 2008-04-16 13:16:18
RCTEXT.DLL : 8.0.32.0 86273 Bytes 2008-04-16 13:16:18

Configuration settings for the scan:
Jobname..........................: Local Drives
Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, A:, E:, D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: 7 mai 2008 16:36

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
Scan process 'iPodService.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'kpf4ss.exe' - '1' Module(s) have been scanned
Scan process 'SMAgent.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
Scan process 'Brmfrmps.exe' - '1' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'SPUVolumeWatcher.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'VirusHeat 4.4.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
Scan process 'sbsm.exe' - '1' Module(s) have been scanned
Scan process 'scm.exe' - '1' Module(s) have been scanned
Scan process 'reader_sl.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'hkcmd.exe' - '1' Module(s) have been scanned
Scan process 'igfxtray.exe' - '1' Module(s) have been scanned
Scan process 'sbmntr.exe' - '1' Module(s) have been scanned
Scan process 'scit.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'brss01a.exe' - '1' Module(s) have been scanned
Scan process 'brsvc01a.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
45 processes with 45 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'A:\'
[INFO] In the drive 'A:\' no data medium is inserted!
Boot sector 'E:\'
[INFO] In the drive 'E:\' no data medium is inserted!

Starting to scan the registry.
The registry was scanned ( '31' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\527631\527631.dll
[DETECTION] Is the Trojan horse TR/BHO.DM
[NOTE] The file was deleted!
Begin scan in 'A:\'
Search path A:\ could not be opened!
Le périphérique n'est pas prêt.

Begin scan in 'E:\'
Search path E:\ could not be opened!
Le périphérique n'est pas prêt.

Begin scan in 'D:\'
Search path D:\ could not be opened!
Le périphérique n'est pas prêt.

End of the scan: 7 mai 2008 17:32
Used time: 56:29 min

The scan has been done completely.

5389 Scanning directories
213547 Files were scanned
1 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
1 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
213546 Files not concerned
964 Archives were scanned
2 Warnings
1 Notes

j'ai aussi fait un scan avec hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:58:06, on 2008-05-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\NetProject\scit.exe
C:\Program Files\NetProject\sbmntr.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\NetProject\scm.exe
C:\Program Files\NetProject\sbsm.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Documents and Settings\Administrateur\Mes documents\marie\kpf4ss.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Administrateur\Mes documents\marie\kpf4gui.exe
C:\Documents and Settings\Administrateur\Mes documents\marie\kpf4gui.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\Administrateur\Mes documents\marie\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://internetsearchservice.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://internetsearchservice.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://internetsearchservice.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://internetsearchservice.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: 527631 helper - {54160F28-994B-48DD-8D83-1B2F6B9EB054} - C:\WINDOWS\system32\527631\527631.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7C109800-A5D5-438F-9640-18D17E168B88} - C:\Program Files\NetProject\sbmdl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [PKR Pal] "C:\Program Files\PKR\pkrpal.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Hope Draw Obj Funk] C:\Documents and Settings\All Users\Application Data\LICENSE FORD HOPE DRAW\01 admin.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [cdrom vga] C:\DOCUME~1\ADMINI~1\APPLIC~1\REALDA~1\Film each.exe
O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\NetProject\scit.exe
O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\NetProject\sbmntr.exe
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.getietool.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.getietool.com/redirect.php (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://buffy.en.musique.free.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O22 - SharedTaskScheduler: delayingly - {e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} - C:\WINDOWS\system32\rtmipr.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Documents and Settings\Administrateur\Mes documents\marie\kpf4ss.exe
A voir également:

31 réponses

Profil bloqué
 
sinon je sais pas si sa peu etre utile mais j'ai fait un analyse avec AVG anti spyware voici le raport :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 18:33:56 2008-05-08

+ Résultat de l'analyse:

C:\Program Files\AntiSpywareShield\AntiSpywareShield0.dll -> Adware.BraveSentry : Ignoré.
C:\Program Files\AntiSpywareShield\AntiSpywareShield1.dll -> Adware.BraveSentry : Ignoré.
C:\Program Files\AntiSpywareShield\AntiSpywareShield3.dll -> Adware.BraveSentry : Ignoré.
C:\System Volume Information\_restore{BFEE5266-B250-43AF-9BC5-128465A384FE}\RP43\A0003340.dll -> Adware.BraveSentry : Ignoré.
C:\System Volume Information\_restore{BFEE5266-B250-43AF-9BC5-128465A384FE}\RP43\A0003341.dll -> Adware.BraveSentry : Ignoré.
C:\System Volume Information\_restore{BFEE5266-B250-43AF-9BC5-128465A384FE}\RP43\A0003342.dll -> Adware.BraveSentry : Ignoré.
C:\System Volume Information\_restore{BFEE5266-B250-43AF-9BC5-128465A384FE}\RP43\A0003366.dll -> Adware.BraveSentry : Ignoré.
C:\System Volume Information\_restore{BFEE5266-B250-43AF-9BC5-128465A384FE}\RP43\A0003370.dll -> Adware.BraveSentry : Ignoré.
C:\System Volume Information\_restore{BFEE5266-B250-43AF-9BC5-128465A384FE}\RP43\A0003371.dll -> Adware.BraveSentry : Ignoré.
[3716] C:\Program Files\AntiSpywareShield\AntiSpywareShield1.dll -> Adware.BraveSentry : Ignoré.
C:\Program Files\AntiSpywareShield\AntiSpywareShield0.ad -> Adware.DrAntispy : Ignoré.
C:\System Volume Information\_restore{BFEE5266-B250-43AF-9BC5-128465A384FE}\RP42\A0002158.dll -> Not-A-Virus.Adware.E404 : Ignoré.
C:\VundoFix Backups\ljjkige.dll.bad -> Not-A-Virus.Adware.Virtumonde : Ignoré.
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\2DDDQ79W\install_en[1].exe -> Not-A-Virus.Downloader.Win32.WinFixer.au : Ignoré.
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\cache\6.0\39\2b76b6a7-36a6ae56 -> Not-A-Virus.ExploitByteVerify : Ignoré.
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\cache\6.0\49\7a6af5f1-75c5163a -> Not-A-Virus.ExploitByteVerify : Ignoré.
:mozilla.56:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\4f8wq8wa.default\cookies.txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@3.adbrite[1].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@adbrite[1].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@stats.adbrite[1].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@rotator.dex.adjuggler[2].txt -> TrackingCookie.Adjuggler : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@www.adobe[2].txt -> TrackingCookie.Adobe : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@adrevolver[2].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Ignoré.
:mozilla.25:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\4f8wq8wa.default\cookies.txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@www.belstat[1].txt -> TrackingCookie.Belstat : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@dbbsrv[1].txt -> TrackingCookie.Dbbsrv : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@dealtime[1].txt -> TrackingCookie.Dealtime : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@fastclick[1].txt -> TrackingCookie.Fastclick : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@findwhat[1].txt -> TrackingCookie.Findwhat : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@hit.gemius[1].txt -> TrackingCookie.Gemius : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@searchportal.information[2].txt -> TrackingCookie.Information : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@intelli-direct[1].txt -> TrackingCookie.Intelli-direct : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@server.iad.liveperson[3].txt -> TrackingCookie.Liveperson : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@image.masterstats[1].txt -> TrackingCookie.Masterstats : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@overture[2].txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@revenue[2].txt -> TrackingCookie.Revenue : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@revsci[1].txt -> TrackingCookie.Revsci : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@counter9.sextracker[1].txt -> TrackingCookie.Sextracker : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@sextracker[2].txt -> TrackingCookie.Sextracker : Ignoré.
:mozilla.58:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\4f8wq8wa.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.59:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\4f8wq8wa.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.60:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\4f8wq8wa.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@statcounter[1].txt -> TrackingCookie.Statcounter : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@anad.tacoda[1].txt -> TrackingCookie.Tacoda : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@tacoda[2].txt -> TrackingCookie.Tacoda : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@trafficmp[1].txt -> TrackingCookie.Trafficmp : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Ignoré.
:mozilla.61:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\4f8wq8wa.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@free.wegcash[2].txt -> TrackingCookie.Wegcash : Ignoré.
C:\Documents and Settings\Administrateur\Cookies\administrateur@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Ignoré.

Fin du rapport

1
Utilisateur anonyme
 
bravo!!!!!!!!!!!! jtai mis du jaune^^ bonne initiative +++++deta part je matte apres g vu engros mais occupée ,jereviens

biz
0
Utilisateur anonyme
 
salut

lance ceci stp

1) Imprime ces instructions ou copie les sur bloc note car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

2) Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton bureau à partir de ce lien :

https://www.malwarebytes.com/

3) A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

4) Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

5) Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

6) MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue. La fenêtre principale de MBAM s'affiche :

7) Dans l'onglet analyse, vérifie que "Exécuter une analyse rapide" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

8) MBAM analyse ton ordinateur. L'analyse peut prendre un certain teps. Il suffit de vérifier de temps en temps son avancement.

9) A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

10) Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

11) MBAM va ouvrir le bloc-notes et y copier le rapport d'analyse. Ferme le bloc-note. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

12) Ferme MBAN en cliquant sur Quitter.

postele rapport ensuite 1nouveau rapport hijack stp
0
Profil bloqué
 
j'ai tout faite ce que tu ma dit et voici le raport de Malwarebytes' Anti-Malware :
Malwarebytes' Anti-Malware 1.12
Version de la base de données: 730

Type de recherche: Examen rapide
Eléments examinés: 52315
Temps écoulé: 12 minute(s), 56 second(s)

Processus mémoire infecté(s): 5
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 40
Valeur(s) du Registre infectée(s): 25
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 4
Fichier(s) infecté(s): 23

Processus mémoire infecté(s):
c:\program files\netproject\scit.exe (Trojan.Zlob) -> No action taken.
c:\program files\netproject\sbmntr.exe (Trojan.Zlob) -> No action taken.
c:\program files\netproject\scm.exe (Trojan.Zlob) -> No action taken.
c:\program files\netproject\sbsm.exe (Trojan.Zlob) -> No action taken.
c:\program files\netproject\sbsm.exe (Trojan.Zlob) -> No action taken.

Module(s) mémoire infecté(s):
c:\WINDOWS\system32\rtmipr.dll (Trojan.Zlob) -> No action taken.
c:\program files\netproject\sbmdl.dll (Trojan.Zlob) -> No action taken.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} (Trojan.Zlob) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{7c109800-a5d5-438f-9640-18d17e168b88} (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7c109800-a5d5-438f-9640-18d17e168b88} (Trojan.Zlob) -> No action taken.
HKEY_CLASSES_ROOT\e404.e404mgr (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\e404.e404mgr.1 (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{54160f28-994b-48dd-8d83-1b2f6b9eb054} (Trojan.BHO) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{54160f28-994b-48dd-8d83-1b2f6b9eb054} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{f7d09218-46d7-4d3d-9b7f-315204cd0836} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{e63648f7-3933-440e-b4f6-a8584dd7b7eb} (Trojan.BHO) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9034a523-d068-4be8-a284-9df278be776e} (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302} (Search.Hijack) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{e94eb13e-d78f-0857-7734-5e67a49ffff1} (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{0dfba66b-db48-4292-831a-e7186d8a61ae} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{46f309ae-9d11-4c10-9d20-2c084b1c8bce} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{4cb95561-af37-4bbd-823c-1e355a744a43} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{76157861-4996-4711-90e4-6d868b877b24} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{81da01db-8100-4865-b9b0-a83f54378435} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{910ef37b-a486-41fc-8a1b-28c5581ab3ac} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{a6b2bc38-7f2a-4202-9b43-a28615727fee} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{b11da4c8-52dc-44a2-b21b-02bf7a93eb5b} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{b5adbfca-c6de-4e5a-a2da-70aa2933b696} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{b5ae5932-f1b3-45e4-842a-59eea65b13a8} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{ba18ba7b-9567-4408-9b87-3d3990c3969e} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{d56509ab-9821-4db0-bf2f-115159804140} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{dff203ea-222c-44fa-8b78-ed88b4587aa2} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{eb22b708-e0d3-4fce-800b-6dd0c5b30d42} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{f1ea02f8-e536-4828-bfb7-3de7fa4d4b09} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{f6e18622-dfa8-4dba-b05e-d3d147e16d44} (Rogue.VirusHeat) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{23624bd0-2a69-4f91-be6a-9f1f22b72c13} (Rogue.VirusHeat) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\video add-on (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Purchased Products (Rogue.Multiple) -> No action taken.
HKEY_CURRENT_USER\Software\NetProject (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Web Application (Trojan.Zlob) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\E404.e404mgr (Trojan.BHO) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\Software\Online Add-on (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\some (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\start (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\mysearchnow.com (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.mysearchnow.com (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SearchMigratedDefaultURL (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\w\ (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\SearchMigratedDefaultURL (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl\w\ (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchURL (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\*.securemanaging.com (Trojan.Zlob) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\NetProject (Trojan.Zlob) -> No action taken.
C:\Program Files\VirusHeat 4.4 (Rogue.VirusHeat) -> No action taken.
C:\Program Files\Video Add-on (Trojan.Zlob) -> No action taken.
C:\WINDOWS\system32\527631 (Trojan.BHO) -> No action taken.

Fichier(s) infecté(s):
c:\WINDOWS\system32\rtmipr.dll (Trojan.Zlob) -> No action taken.
c:\program files\netproject\scit.exe (Trojan.Zlob) -> No action taken.
c:\program files\netproject\sbmntr.exe (Trojan.Zlob) -> No action taken.
c:\program files\netproject\scm.exe (Trojan.Zlob) -> No action taken.
c:\program files\netproject\sbsm.exe (Trojan.Zlob) -> No action taken.
c:\program files\netproject\sbmdl.dll (Trojan.Zlob) -> No action taken.
C:\Program Files\NetProject\ot.ico (Trojan.Zlob) -> No action taken.
C:\Program Files\NetProject\sbun.exe (Trojan.Zlob) -> No action taken.
C:\Program Files\NetProject\scu.exe (Trojan.Zlob) -> No action taken.
C:\Program Files\NetProject\ts.ico (Trojan.Zlob) -> No action taken.
C:\Program Files\NetProject\waun.exe (Trojan.Zlob) -> No action taken.
C:\Documents and Settings\Administrateur\Local Settings\Temp\zfe1.exe (Trojan.Zlob) -> No action taken.
C:\Documents and Settings\Administrateur\Local Settings\Temp\zfe2.exe (Trojan.Zlob) -> No action taken.
C:\Program Files\VirusHeat 4.4\ignored.lst (Rogue.VirusHeat) -> No action taken.
C:\Program Files\VirusHeat 4.4\vht.dat (Rogue.VirusHeat) -> No action taken.
C:\Program Files\VirusHeat 4.4\VirusHeat 4.4.exe (Rogue.VirusHeat) -> No action taken.
C:\Program Files\VirusHeat 4.4\vpp.ini (Rogue.VirusHeat) -> No action taken.
C:\Program Files\Video Add-on\ot.ico (Trojan.Zlob) -> No action taken.
C:\Program Files\Video Add-on\ts.ico (Trojan.Zlob) -> No action taken.
C:\Program Files\Video Add-on\uninst.exe (Trojan.Zlob) -> No action taken.
C:\Documents and Settings\Administrateur\Favoris\Online Security Test.url (Rogue.Link) -> No action taken.
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.url (Rogue.Link) -> No action taken.
C:\Documents and Settings\All Users\Menu Démarrer\Security Troubleshooting.url (Rogue.Link) -> No action taken.

j'ai aussi faite un raport avec hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:17:49, on 2008-05-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\NetProject\scit.exe
C:\Program Files\NetProject\sbmntr.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\NetProject\scm.exe
C:\Program Files\NetProject\sbsm.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Documents and Settings\Administrateur\Mes documents\marie\kpf4ss.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Administrateur\Mes documents\marie\kpf4gui.exe
C:\Documents and Settings\Administrateur\Mes documents\marie\kpf4gui.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\NetProject\sbsm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrateur\Mes documents\marie\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://internetsearchservice.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://internetsearchservice.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://internetsearchservice.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://internetsearchservice.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: 527631 helper - {54160F28-994B-48DD-8D83-1B2F6B9EB054} - C:\WINDOWS\system32\527631\527631.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7C109800-A5D5-438F-9640-18D17E168B88} - C:\Program Files\NetProject\sbmdl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [PKR Pal] "C:\Program Files\PKR\pkrpal.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Hope Draw Obj Funk] C:\Documents and Settings\All Users\Application Data\LICENSE FORD HOPE DRAW\01 admin.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [cdrom vga] C:\DOCUME~1\ADMINI~1\APPLIC~1\REALDA~1\Film each.exe
O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\NetProject\scit.exe
O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\NetProject\sbmntr.exe
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.getietool.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.getietool.com/redirect.php (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://buffy.en.musique.free.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O22 - SharedTaskScheduler: delayingly - {e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} - C:\WINDOWS\system32\rtmipr.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Documents and Settings\Administrateur\Mes documents\marie\kpf4ss.exe
0
Utilisateur anonyme
 
re

oulaaa c'est là fête sur ton pc a voir le rapport malwarebytes ............. bon je matte ton hijack Marie^^ ,mais pendant ce temps si tu as le temps etc..,désinstalle via ajout/sup program hijack ,relance ton ordi et rends toi ici pourle réinstaller correctemnt stp (dsl ma barre espace merde ) donc regarde ici c'est 1 blog de monsieur Claude que je ne vois pu tiens!!! (a remédier pour moi car super gars en aide !!! ) tu devrais même garder ce lien enfin si cela t'interresse biensur^^

donc suis les instructions pas à pas pour réinstaller hijack (le nommer autrement serait 1 + ) si tu n'arrive pas a renommer,tanpis mais qu'il soit bien placé est important ,il créée 1 dossier de retour en cas de merde ou de fichiers effacés restant essentiel pour ton ordi!!! pas pourte faire peur^^ juste je t'explique quec paspour t'emmerder queje demande ça

bizz
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Profil bloqué
 
bon j'ai désinstaller hijackthis mais j'ai pas tout piger en se qui conserne le reste c'est qui monsieur claude?
0
Utilisateur anonyme
 
1 personne qui aidais ici , 1bon helpeur

que n'as tu pas compris?
0
Profil bloqué
 
pas grand chose lol mais je le trouve ou son blog?
0
Utilisateur anonyme
 
le blog ici :https://leblogdeclaude.blogspot.com/

ok !domage rien d'effacé !!!! lance ceci si t toujours là ^^

Télécharge « clean.zip »
http://www.malekal.com/download/clean.zip
•- Décompresse-le sur ton bureau (clic droit / extraire tout), tu dois obtenir un dossier dénommé "clean ".

•- Redémarre en mode sans échec. ( note bien ce que tu as à faire ).
•- Ouvre le dossier « clean » qui se trouve sur ton bureau.
•- Double-clic sur « clean.cmd ».
Une fenêtre noire va apparaître, choisis l’option 2.

Clean va travailler.
•- Redémarre normalement
•- Poste qui se trouve ici C:\rapport_clean.txt.

(- Où est le rapport clean ? : « Poste de travail » / double clic sur disque « C / » double-clic sur « rapport_clean.txt » et « copier/coller le contenu » sur le forum. )
0
Profil bloqué
 
et voila le raport :
Script execute en mode sans echec
Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec 2008-05-07 a 22:02:08,48

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32

*** Suppression des fichiers dans C:\Program Files
tentative de suppression de "C:\Program Files\PartyGaming\"
tentative de suppression de "C:\Program Files\PokerStars\"
tentative de suppression de "C:\Program Files\Video Add-on\"

*** Suppression des clefs du registre effectuee..
*** Fin du rapport !
0
Utilisateur anonyme
 
re
ok!! tu sais les jeux et je suis joueuse aussi mais certains , voir pas mal de sites te ramene des merdes !dommage je c !!

lance ceci please:

Télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.
Double-clique sur OTMoveIt.exe pour le lancer.
Copie la liste qui se trouve en citation ci-dessous et colle-la dans le cadre de gauche de OTMoveIt sous Paste List of Files/Folders to move.

Citation :

C:\Program Files\PartyGaming\
C:\Program Files\PokerStars\
C:\Program Files\Video Add-on\

clique sur MoveIt! pour lancer la suppression.
Le résultat apparaitra dans le cadre "Results".
Clique sur Exit pour fermer.
Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

poste le rapport et 60% de t gains au poker loool
0
Profil bloqué
 
tien :
Folder C:\Program Files\PartyGaming\ not found.
Folder C:\Program Files\PokerStars\ not found.
Folder C:\Program Files\Video Add-on\ not found.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 05072008_222953

lol faudrait je demande a mon frere pour ça et je doute qu'il accepte lol
0
Utilisateur anonyme
 
reposte 1rapport clean tout neuf stp
0
Profil bloqué
 
le raport de clean:
Script execute en mode sans echec
Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec 2008-05-07 a 23:00:00,09

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32

*** Suppression des fichiers dans C:\Program Files

*** Suppression des clefs du registre effectuee..
*** Fin du rapport !
0
Utilisateur anonyme
 
re

ok déjà c bien

vois tu du changement sur ton ordi ou pas encore,dis si c pareil , ok?
0
Profil bloqué
 
j'ai un peu moins de pub mais a peine

ps : je vais me coucher je re demain
0
Utilisateur anonyme
 
ok

on poursuit demain,taleur enfin......!!!!bonnenuit à toi ,enfin beaux reves

bises
0
Profil bloqué
 
je pense que sa n'apas donner grand chose lol je me suis lever avec une vingtaine de page ouvert et un virus détecter
0
Utilisateur anonyme
 
salut

lance stp ceci :

Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
http://www.atribune.org/ccount/click.php?id=4
Double-clique VundoFix.exe afin de le lancer.

Clique sur le bouton Scan for Vundo.
Lorsque le scan est complété, clique sur le bouton Remove Vundo.
Une invite te demandera si tu veux supprimer les fichiers, clique YES
Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown") ; clique OK
Démarre ton PC à nouveau.
Copie/colle le rapport (c:\vundofix.txt) dans ta réponse

bises
0
Profil bloqué
 
le raport de vundofix:

VundoFix V7.0.3

Scan started at 02:09:50 2008-03-25

Listing files found while scanning....

C:\windows\system32\ddayx.dll
C:\WINDOWS\system32\ljjkige.dll
C:\windows\system32\qpqss.ini
C:\windows\system32\qpqss.ini2
C:\windows\system32\ssqpq.dll
C:\windows\system32\xyadd.ini
C:\windows\system32\xyadd.ini2

Beginning removal...

Attempting to delete C:\windows\system32\ddayx.dll
C:\windows\system32\ddayx.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\ljjkige.dll
C:\WINDOWS\system32\ljjkige.dll Could not be deleted.

Attempting to delete C:\windows\system32\qpqss.ini
C:\windows\system32\qpqss.ini Has been deleted!

Attempting to delete C:\windows\system32\qpqss.ini2
C:\windows\system32\qpqss.ini2 Has been deleted!

Attempting to delete C:\windows\system32\ssqpq.dll
C:\windows\system32\ssqpq.dll Has been deleted!

Attempting to delete C:\windows\system32\xyadd.ini
C:\windows\system32\xyadd.ini Has been deleted!

Attempting to delete C:\windows\system32\xyadd.ini2
C:\windows\system32\xyadd.ini2 Has been deleted!

Performing Repairs to the registry.
Done!

Beginning removal...

Performing Repairs to the registry.
Done!

VundoFix V7.0.3

Scan started at 11:57:09 2008-03-25

Listing files found while scanning....

No infected files were found.

VundoFix V7.0.3

Scan started at 12:29:14 2008-03-25

Listing files found while scanning....

No infected files were found.

VundoFix V7.0.3

Scan started at 22:33:27 2008-03-26

Listing files found while scanning....

No infected files were found.

VundoFix V7.0.3

Scan started at 11:04:00 2008-03-29

Listing files found while scanning....

No infected files were found.

Beginning removal...

VundoFix V7.0.3

Scan started at 13:33:38 2008-03-29

Listing files found while scanning....

C:\windows\system32\ddayx.dll
C:\WINDOWS\system32\ljjkige.dll
C:\windows\system32\vtutq.dll
C:\windows\system32\xyadd.ini
C:\windows\system32\xyadd.ini2

Beginning removal...

Attempting to delete C:\windows\system32\ddayx.dll
C:\windows\system32\ddayx.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\ljjkige.dll
C:\WINDOWS\system32\ljjkige.dll Could not be deleted.

Attempting to delete C:\windows\system32\vtutq.dll
C:\windows\system32\vtutq.dll Could not be deleted.

Attempting to delete C:\windows\system32\xyadd.ini
C:\windows\system32\xyadd.ini Has been deleted!

Attempting to delete C:\windows\system32\xyadd.ini2
C:\windows\system32\xyadd.ini2 Has been deleted!

Performing Repairs to the registry.
Done!

Beginning removal...

Attempting to delete C:\WINDOWS\system32\ljjkige.dll
C:\WINDOWS\system32\ljjkige.dll Has been deleted!

Performing Repairs to the registry.
Done!

VundoFix V7.0.3

Scan started at 15:12:11 2008-03-29

Listing files found while scanning....

No infected files were found.

VundoFix V7.0.3

Scan started at 16:19:40 2008-03-29

Listing files found while scanning....

C:\windows\system32\ddayx.dll
C:\WINDOWS\system32\ljjkige.dll
C:\windows\system32\qtutv.ini
C:\windows\system32\qtutv.ini2
C:\windows\system32\vtutq.dll
C:\windows\system32\xyadd.ini
C:\windows\system32\xyadd.ini2

Beginning removal...

Attempting to delete C:\windows\system32\ddayx.dll
C:\windows\system32\ddayx.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\ljjkige.dll
C:\WINDOWS\system32\ljjkige.dll Could not be deleted.

Attempting to delete C:\windows\system32\qtutv.ini
C:\windows\system32\qtutv.ini Has been deleted!

Attempting to delete C:\windows\system32\qtutv.ini2
C:\windows\system32\qtutv.ini2 Has been deleted!

Attempting to delete C:\windows\system32\vtutq.dll
C:\windows\system32\vtutq.dll Could not be deleted.

Attempting to delete C:\windows\system32\xyadd.ini
C:\windows\system32\xyadd.ini Has been deleted!

Attempting to delete C:\windows\system32\xyadd.ini2
C:\windows\system32\xyadd.ini2 Has been deleted!

Performing Repairs to the registry.
Done!

Beginning removal...

Attempting to delete C:\WINDOWS\system32\ljjkige.dll
C:\WINDOWS\system32\ljjkige.dll Has been deleted!

Attempting to delete C:\windows\system32\vtutq.dll
C:\windows\system32\vtutq.dll Has been deleted!

Performing Repairs to the registry.
Done!

VundoFix V7.0.3

Scan started at 23:31:06 2008-03-30

Listing files found while scanning....

No infected files were found.

VundoFix V7.0.3

Scan started at 16:57:16 2008-04-15

Listing files found while scanning....

No infected files were found.

VundoFix V7.0.3

Scan started at 23:03:23 2008-04-21

Listing files found while scanning....

No infected files were found.

VundoFix V7.0.3

Scan started at 18:09:18 2008-05-07

Listing files found while scanning....

No infected files were found.

VundoFix V7.0.3

Scan started at 16:42:37 2008-05-08

Listing files found while scanning....

No infected files were found.

Beginning removal...
0
Utilisateur anonyme
 
re

super le vundo

t'as redemarré et testé apres ça?
0
Profil bloqué
 
nop lol ma faire ça
0
Utilisateur anonyme
 
? pas compris lol
0