Sujet Précédent Sujet Suivant

Iexplorer sature ma mémoire - rapport hijack

roni034 Messages postés 145 Statut Membre -  
fiat500 Messages postés 2681 Statut Membre -
Bonjour,

ma mémoire est totalement saturée au démarage de windows et iexplorer apprait dans le gestionnaire des taches sans meme que j'ai ouvert une page. Je poste mon rapport hijack , merci de m 'aider

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:43:30, on 06/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [file wave user bat] C:\Documents and Settings\All Users\Application Data\Mail For File Wave\Meta Bird.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [pdfSaver3] "C:\Program Files\PDF-XChange 3 Pro\pdfSaver\pdfSaver3.exe"
O4 - HKCU\..\Run: [bagsbase] C:\DOCUME~1\WEBMAS~1\APPLIC~1\REMOTE~1\Bolt proc bin.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

8 réponses

Réponse 1 / 8
fiat500 Messages postés 2681 Statut Membre 82
 
bonsoir

infection lop

fais ca:

télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
---
0
roni034
 
merci pour ta réponse , voila le post ( en mode sans echec , c'est bon aussi ? )


-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Webmaster ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 06/07/2008 | 18:59:35,11 ] [ PC : BLOCH ]
[ MAJ : 06-07-2008 | 10:55 ]

-------------[ Listing des dossiers dans Application Data ]------------

[08/06/2008|14:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[14/11/2007|02:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[14/11/2007|01:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[23/03/2008|19:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[18/11/2007|16:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[13/04/2008|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[14/05/2008|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[04/07/2008|12:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mail For File Wave
[16/05/2008|17:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[06/04/2008|00:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[05/04/2008|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[14/11/2007|02:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[14/11/2007|01:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[14/11/2007|01:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[14/11/2007|13:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[31/01/2008|13:47] C:\DOCUME~1\Maison\APPLIC~1\Adobe
[18/11/2007|00:52] C:\DOCUME~1\Maison\APPLIC~1\Ahead
[14/11/2007|14:23] C:\DOCUME~1\Maison\APPLIC~1\ArcSoft
[24/11/2007|21:39] C:\DOCUME~1\Maison\APPLIC~1\Babylon
[14/11/2007|14:26] C:\DOCUME~1\Maison\APPLIC~1\Canon
[15/11/2007|00:38] C:\DOCUME~1\Maison\APPLIC~1\CyberLink
[14/11/2007|01:26] C:\DOCUME~1\Maison\APPLIC~1\desktop.ini
[02/12/2007|23:33] C:\DOCUME~1\Maison\APPLIC~1\DivX
[23/03/2008|19:39] C:\DOCUME~1\Maison\APPLIC~1\Google
[14/11/2007|01:55] C:\DOCUME~1\Maison\APPLIC~1\Identities
[14/11/2007|02:23] C:\DOCUME~1\Maison\APPLIC~1\Macromedia
[02/12/2007|23:33] C:\DOCUME~1\Maison\APPLIC~1\Media Player Classic
[27/03/2008|07:39] C:\DOCUME~1\Maison\APPLIC~1\Microsoft
[02/12/2007|14:33] C:\DOCUME~1\Maison\APPLIC~1\OpenOffice.org2
[14/11/2007|16:17] C:\DOCUME~1\Maison\APPLIC~1\Sun
[14/11/2007|14:28] C:\DOCUME~1\Maison\APPLIC~1\WinRAR

[31/01/2008|12:31] C:\DOCUME~1\Maman\APPLIC~1\Adobe
[10/02/2008|00:20] C:\DOCUME~1\Maman\APPLIC~1\CyberLink
[14/11/2007|01:26] C:\DOCUME~1\Maman\APPLIC~1\desktop.ini
[24/03/2008|00:03] C:\DOCUME~1\Maman\APPLIC~1\Google
[18/11/2007|16:26] C:\DOCUME~1\Maman\APPLIC~1\Identities
[18/11/2007|17:41] C:\DOCUME~1\Maman\APPLIC~1\Macromedia
[30/11/2007|00:56] C:\DOCUME~1\Maman\APPLIC~1\Media Player Classic
[14/05/2008|21:33] C:\DOCUME~1\Maman\APPLIC~1\Microsoft
[02/12/2007|18:58] C:\DOCUME~1\Maman\APPLIC~1\OpenOffice.org2
[12/05/2008|17:27] C:\DOCUME~1\Maman\APPLIC~1\Remote Slow File
[03/12/2007|14:05] C:\DOCUME~1\Maman\APPLIC~1\Sun

[22/05/2008|16:46] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Adobe
[25/06/2008|01:59] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\CyberLink
[14/11/2007|01:26] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\desktop.ini
[16/05/2008|14:41] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Google
[15/05/2008|15:07] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Identities
[22/05/2008|16:46] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Macromedia
[16/05/2008|17:30] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Malwarebytes
[25/06/2008|00:09] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Microsoft
[15/05/2008|15:14] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Remote Slow File
[08/06/2008|02:10] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Sun

[14/11/2007|01:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[04/07/2008|10:50] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Adobe
[14/11/2007|01:26] C:\DOCUME~1\WEBMAS~1\APPLIC~1\desktop.ini
[18/05/2008|17:20] C:\DOCUME~1\WEBMAS~1\APPLIC~1\DivX
[23/03/2008|20:43] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Google
[29/12/2007|19:49] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Identities
[15/01/2008|00:11] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Macromedia
[22/05/2008|12:12] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Malwarebytes
[04/07/2008|15:27] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Media Player Classic
[19/05/2008|11:59] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Microsoft
[04/07/2008|12:01] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Remote Slow File

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[06/07/2008 18:00][--ah-----] C:\WINDOWS\tasks\AB2DB20091FA2860.job
[06/07/2008 18:00][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
[06/07/2008 18:00][--ah-----] C:\WINDOWS\tasks\A022D20D918D4AAD.job
[06/07/2008 18:35][--ah-----] C:\WINDOWS\tasks\SA.DAT
[24/08/2001 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

A022D20D918D4AAD.job <--> c:\docume~1\maman\applic~1\remote~1\pingproxyeach.exe
AB2DB20091FA2860.job <--> c:\docume~1\webmas~1\applic~1\remote~1\pingproxyeach.exe

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[08/06/2008|14:11] C:\Program Files\Adobe
[14/11/2007|02:35] C:\Program Files\Ahead
[14/11/2007|02:04] C:\Program Files\Alwil Software
[14/11/2007|14:17] C:\Program Files\ArcSoft
[16/05/2008|17:24] C:\Program Files\CCleaner
[12/05/2008|17:26] C:\Program Files\Circle Developement
[14/11/2007|01:41] C:\Program Files\ComPlus Applications
[14/11/2007|02:40] C:\Program Files\CyberLink
[13/04/2008|17:28] C:\Program Files\Davka Corp
[23/05/2008|18:05] C:\Program Files\Fichiers communs
[23/03/2008|21:32] C:\Program Files\Google
[16/05/2008|13:39] C:\Program Files\InstallShield Installation Information
[11/06/2008|02:58] C:\Program Files\Internet Explorer
[23/03/2008|10:56] C:\Program Files\Java
[30/11/2007|00:55] C:\Program Files\K-Lite Codec Pack
[18/11/2007|12:07] C:\Program Files\Lavasoft
[23/03/2008|21:24] C:\Program Files\Logitech
[16/05/2008|17:50] C:\Program Files\Lopxp
[16/05/2008|17:30] C:\Program Files\Malwarebytes' Anti-Malware
[14/11/2007|16:28] C:\Program Files\Messenger
[12/05/2008|17:26] C:\Program Files\Messenger Plus! Live
[14/11/2007|01:48] C:\Program Files\microsoft frontpage
[02/12/2007|12:08] C:\Program Files\Microsoft Office
[14/11/2007|03:44] C:\Program Files\Movie Maker
[14/11/2007|01:41] C:\Program Files\MSN Gaming Zone
[12/05/2008|17:26] C:\Program Files\MSN Messenger
[28/03/2008|01:38] C:\Program Files\MSXML 4.0
[14/11/2007|03:39] C:\Program Files\NetMeeting
[02/07/2008|18:00] C:\Program Files\Norton Security Scan
[02/12/2007|19:02] C:\Program Files\OpenOffice.org 2.3
[14/11/2007|16:26] C:\Program Files\Outlook Express
[16/05/2008|14:52] C:\Program Files\Panda Security
[13/04/2008|17:33] C:\Program Files\PDF-XChange 3 Pro
[04/07/2008|12:01] C:\Program Files\Remote Slow File
[14/11/2007|01:44] C:\Program Files\Services en ligne
[06/07/2008|18:42] C:\Program Files\Trend Micro
[14/11/2007|01:55] C:\Program Files\Uninstall Information
[23/03/2008|17:59] C:\Program Files\Windows Live
[14/11/2007|16:19] C:\Program Files\Windows Media Connect 2
[14/11/2007|16:27] C:\Program Files\Windows Media Player
[14/11/2007|12:47] C:\Program Files\Windows NT
[14/11/2007|02:16] C:\Program Files\WindowsUpdate
[14/11/2007|14:21] C:\Program Files\WinRAR
[14/11/2007|01:48] C:\Program Files\xerox

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[08/06/2008|14:12] C:\Program Files\Fichiers communs\Adobe
[14/11/2007|02:35] C:\Program Files\Fichiers communs\Ahead
[02/12/2007|12:08] C:\Program Files\Fichiers communs\DESIGNER
[16/05/2008|13:41] C:\Program Files\Fichiers communs\InstallShield
[14/11/2007|14:38] C:\Program Files\Fichiers communs\Java
[23/03/2008|21:21] C:\Program Files\Fichiers communs\Labtec
[02/12/2007|12:09] C:\Program Files\Fichiers communs\Microsoft Shared
[14/11/2007|01:43] C:\Program Files\Fichiers communs\MSSoap
[14/11/2007|01:27] C:\Program Files\Fichiers communs\ODBC
[14/11/2007|01:43] C:\Program Files\Fichiers communs\Services
[14/11/2007|01:27] C:\Program Files\Fichiers communs\SpeechEngines
[04/07/2008|06:29] C:\Program Files\Fichiers communs\Symantec Shared
[02/12/2007|12:08] C:\Program Files\Fichiers communs\System
[18/11/2007|12:03] C:\Program Files\Fichiers communs\Wise Installation Wizard

---------------------------[ Process ]--------------------------

... 23

iexplore.exe ~ [1128]
iexplore.exe ~ [1712]

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mail For File Wave
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mail For File Wave\Meta Bird.exe
C:\DOCUME~1\Maman\APPLIC~1\remote~1
C:\DOCUME~1\Maman\APPLIC~1\remote~1\Bolt proc bin.exe
C:\DOCUME~1\Maman\APPLIC~1\remote~1\Mp3 amen default meta.exe
C:\DOCUME~1\Maman\APPLIC~1\remote~1\ping proxy each.exe
C:\DOCUME~1\Maman\APPLIC~1\remote~1\yqvtqkfz.exe
C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\remote~1
C:\DOCUME~1\WEBMAS~1\APPLIC~1\remote~1
C:\DOCUME~1\WEBMAS~1\APPLIC~1\remote~1\Bolt proc bin.exe
C:\DOCUME~1\WEBMAS~1\APPLIC~1\remote~1\Mp3 amen default meta.exe
C:\DOCUME~1\WEBMAS~1\APPLIC~1\remote~1\ping proxy each.exe
C:\DOCUME~1\WEBMAS~1\APPLIC~1\remote~1\plenogka.exe
C:\Program Files\remote~1
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\WINDOWS\Prefetch\META BIRD.EXE-1F9D39FD.pf
C:\WINDOWS\Prefetch\BOLT PROC BIN.EXE-34CB436F.pf
C:\WINDOWS\Prefetch\PING PROXY EACH.EXE-11FB835D.pf
C:\WINDOWS\Prefetch\PLENOGKA.EXE-0528CE6E.pf
C:\WINDOWS\Tasks\A022D20D918D4AAD.job
C:\WINDOWS\Tasks\AB2DB20091FA2860.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"bagsbase"="C:\\DOCUME~1\\WEBMAS~1\\APPLIC~1\\REMOTE~1\\Bolt proc bin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"file wave user bat"="C:\\Documents and Settings\\All Users\\Application Data\\Mail For File Wave\\Meta Bird.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-06 19:01:41
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_05\\bin\\jusched.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechVideoRepair"="C:\\Program Files\\Logitech\\Video\\ISStart.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechVideoTray"="C:\\Program Files\\Logitech\\Video\\LogiTray.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"file wave user bat"="C:\\Documents and Settings\\All Users\\Application Data\\Mail For File Wave\\Meta Bird.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="\"C:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\""

[b]! EGDACCESS !/b



[F:67][D:15]-> C:\DOCUME~1\WEBMAS~1\LOCALS~1\Temp
[F:22][D:0]-> C:\DOCUME~1\WEBMAS~1\Cookies
[F:478][D:5]-> C:\DOCUME~1\WEBMAS~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 19:02:08,08 ]----------------------
0
Réponse 2 / 8
fiat500 Messages postés 2681 Statut Membre 82
 
pour virer ce qui est trouvé:

* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)
0
roni034
 
merci , voici le nouvo rapport :


-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Webmaster ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 06/07/2008 | 19:34:36,31 ] [ PC : BLOCH ]
[ MAJ : 06-07-2008 | 10:55 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mail For File Wave\Meta Bird.exe
Supprime! - C:\DOCUME~1\Maman\APPLIC~1\remote~1\Bolt proc bin.exe
Supprime! - C:\DOCUME~1\Maman\APPLIC~1\remote~1\Mp3 amen default meta.exe
Supprime! - C:\DOCUME~1\Maman\APPLIC~1\remote~1\ping proxy each.exe
Supprime! - C:\DOCUME~1\Maman\APPLIC~1\remote~1\yqvtqkfz.exe
Supprime! - C:\DOCUME~1\WEBMAS~1\APPLIC~1\remote~1\Bolt proc bin.exe
Supprime! - C:\DOCUME~1\WEBMAS~1\APPLIC~1\remote~1\Mp3 amen default meta.exe
Supprime! - C:\DOCUME~1\WEBMAS~1\APPLIC~1\remote~1\ping proxy each.exe
Supprime! - C:\DOCUME~1\WEBMAS~1\APPLIC~1\remote~1\plenogka.exe
Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
Supprime! - C:\WINDOWS\Prefetch\META BIRD.EXE-1F9D39FD.pf
Supprime! - C:\WINDOWS\Prefetch\BOLT PROC BIN.EXE-34CB436F.pf
Supprime! - C:\WINDOWS\Prefetch\PING PROXY EACH.EXE-11FB835D.pf
Supprime! - C:\WINDOWS\Prefetch\PLENOGKA.EXE-0528CE6E.pf
Supprime! - C:\WINDOWS\Tasks\A022D20D918D4AAD.job
Supprime! - C:\WINDOWS\Tasks\AB2DB20091FA2860.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mail For File Wave
Supprime! - C:\DOCUME~1\Maman\APPLIC~1\remote~1
Supprime! - C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\remote~1
Supprime! - C:\DOCUME~1\WEBMAS~1\APPLIC~1\remote~1
Supprime! - C:\Program Files\remote~1
Supprime! - C:\Program Files\Circle Developement

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


-------------[ Listing des dossiers dans APPLIC~1 ]------------

[08/06/2008|14:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[14/11/2007|02:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[14/11/2007|01:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[23/03/2008|19:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[18/11/2007|16:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[13/04/2008|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[14/05/2008|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[16/05/2008|17:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[06/04/2008|00:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[05/04/2008|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[14/11/2007|02:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[14/11/2007|01:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[14/11/2007|01:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[14/11/2007|13:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[31/01/2008|13:47] C:\DOCUME~1\Maison\APPLIC~1\Adobe
[18/11/2007|00:52] C:\DOCUME~1\Maison\APPLIC~1\Ahead
[14/11/2007|14:23] C:\DOCUME~1\Maison\APPLIC~1\ArcSoft
[24/11/2007|21:39] C:\DOCUME~1\Maison\APPLIC~1\Babylon
[14/11/2007|14:26] C:\DOCUME~1\Maison\APPLIC~1\Canon
[15/11/2007|00:38] C:\DOCUME~1\Maison\APPLIC~1\CyberLink
[14/11/2007|01:26] C:\DOCUME~1\Maison\APPLIC~1\desktop.ini
[02/12/2007|23:33] C:\DOCUME~1\Maison\APPLIC~1\DivX
[23/03/2008|19:39] C:\DOCUME~1\Maison\APPLIC~1\Google
[14/11/2007|01:55] C:\DOCUME~1\Maison\APPLIC~1\Identities
[14/11/2007|02:23] C:\DOCUME~1\Maison\APPLIC~1\Macromedia
[02/12/2007|23:33] C:\DOCUME~1\Maison\APPLIC~1\Media Player Classic
[27/03/2008|07:39] C:\DOCUME~1\Maison\APPLIC~1\Microsoft
[02/12/2007|14:33] C:\DOCUME~1\Maison\APPLIC~1\OpenOffice.org2
[14/11/2007|16:17] C:\DOCUME~1\Maison\APPLIC~1\Sun
[14/11/2007|14:28] C:\DOCUME~1\Maison\APPLIC~1\WinRAR

[31/01/2008|12:31] C:\DOCUME~1\Maman\APPLIC~1\Adobe
[10/02/2008|00:20] C:\DOCUME~1\Maman\APPLIC~1\CyberLink
[14/11/2007|01:26] C:\DOCUME~1\Maman\APPLIC~1\desktop.ini
[24/03/2008|00:03] C:\DOCUME~1\Maman\APPLIC~1\Google
[18/11/2007|16:26] C:\DOCUME~1\Maman\APPLIC~1\Identities
[18/11/2007|17:41] C:\DOCUME~1\Maman\APPLIC~1\Macromedia
[30/11/2007|00:56] C:\DOCUME~1\Maman\APPLIC~1\Media Player Classic
[14/05/2008|21:33] C:\DOCUME~1\Maman\APPLIC~1\Microsoft
[02/12/2007|18:58] C:\DOCUME~1\Maman\APPLIC~1\OpenOffice.org2
[03/12/2007|14:05] C:\DOCUME~1\Maman\APPLIC~1\Sun

[22/05/2008|16:46] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Adobe
[25/06/2008|01:59] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\CyberLink
[14/11/2007|01:26] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\desktop.ini
[16/05/2008|14:41] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Google
[15/05/2008|15:07] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Identities
[22/05/2008|16:46] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Macromedia
[16/05/2008|17:30] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Malwarebytes
[25/06/2008|00:09] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Microsoft
[08/06/2008|02:10] C:\DOCUME~1\MAMAN~1.FAM\APPLIC~1\Sun

[14/11/2007|01:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[04/07/2008|10:50] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Adobe
[14/11/2007|01:26] C:\DOCUME~1\WEBMAS~1\APPLIC~1\desktop.ini
[18/05/2008|17:20] C:\DOCUME~1\WEBMAS~1\APPLIC~1\DivX
[23/03/2008|20:43] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Google
[29/12/2007|19:49] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Identities
[15/01/2008|00:11] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Macromedia
[22/05/2008|12:12] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Malwarebytes
[04/07/2008|15:27] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Media Player Classic
[19/05/2008|11:59] C:\DOCUME~1\WEBMAS~1\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[06/07/2008 18:00][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
[06/07/2008 18:35][--ah-----] C:\WINDOWS\tasks\SA.DAT
[24/08/2001 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[08/06/2008|14:11] C:\Program Files\Adobe
[14/11/2007|02:35] C:\Program Files\Ahead
[14/11/2007|02:04] C:\Program Files\Alwil Software
[14/11/2007|14:17] C:\Program Files\ArcSoft
[16/05/2008|17:24] C:\Program Files\CCleaner
[14/11/2007|01:41] C:\Program Files\ComPlus Applications
[14/11/2007|02:40] C:\Program Files\CyberLink
[13/04/2008|17:28] C:\Program Files\Davka Corp
[23/05/2008|18:05] C:\Program Files\Fichiers communs
[23/03/2008|21:32] C:\Program Files\Google
[16/05/2008|13:39] C:\Program Files\InstallShield Installation Information
[11/06/2008|02:58] C:\Program Files\Internet Explorer
[23/03/2008|10:56] C:\Program Files\Java
[30/11/2007|00:55] C:\Program Files\K-Lite Codec Pack
[18/11/2007|12:07] C:\Program Files\Lavasoft
[23/03/2008|21:24] C:\Program Files\Logitech
[16/05/2008|17:50] C:\Program Files\Lopxp
[16/05/2008|17:30] C:\Program Files\Malwarebytes' Anti-Malware
[14/11/2007|16:28] C:\Program Files\Messenger
[12/05/2008|17:26] C:\Program Files\Messenger Plus! Live
[14/11/2007|01:48] C:\Program Files\microsoft frontpage
[02/12/2007|12:08] C:\Program Files\Microsoft Office
[14/11/2007|03:44] C:\Program Files\Movie Maker
[14/11/2007|01:41] C:\Program Files\MSN Gaming Zone
[12/05/2008|17:26] C:\Program Files\MSN Messenger
[28/03/2008|01:38] C:\Program Files\MSXML 4.0
[14/11/2007|03:39] C:\Program Files\NetMeeting
[02/07/2008|18:00] C:\Program Files\Norton Security Scan
[02/12/2007|19:02] C:\Program Files\OpenOffice.org 2.3
[14/11/2007|16:26] C:\Program Files\Outlook Express
[16/05/2008|14:52] C:\Program Files\Panda Security
[13/04/2008|17:33] C:\Program Files\PDF-XChange 3 Pro
[14/11/2007|01:44] C:\Program Files\Services en ligne
[06/07/2008|18:42] C:\Program Files\Trend Micro
[14/11/2007|01:55] C:\Program Files\Uninstall Information
[23/03/2008|17:59] C:\Program Files\Windows Live
[14/11/2007|16:19] C:\Program Files\Windows Media Connect 2
[14/11/2007|16:27] C:\Program Files\Windows Media Player
[14/11/2007|12:47] C:\Program Files\Windows NT
[14/11/2007|02:16] C:\Program Files\WindowsUpdate
[14/11/2007|14:21] C:\Program Files\WinRAR
[14/11/2007|01:48] C:\Program Files\xerox

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[08/06/2008|14:12] C:\Program Files\Fichiers communs\Adobe
[14/11/2007|02:35] C:\Program Files\Fichiers communs\Ahead
[02/12/2007|12:08] C:\Program Files\Fichiers communs\DESIGNER
[16/05/2008|13:41] C:\Program Files\Fichiers communs\InstallShield
[14/11/2007|14:38] C:\Program Files\Fichiers communs\Java
[23/03/2008|21:21] C:\Program Files\Fichiers communs\Labtec
[02/12/2007|12:09] C:\Program Files\Fichiers communs\Microsoft Shared
[14/11/2007|01:43] C:\Program Files\Fichiers communs\MSSoap
[14/11/2007|01:27] C:\Program Files\Fichiers communs\ODBC
[14/11/2007|01:43] C:\Program Files\Fichiers communs\Services
[14/11/2007|01:27] C:\Program Files\Fichiers communs\SpeechEngines
[04/07/2008|06:29] C:\Program Files\Fichiers communs\Symantec Shared
[02/12/2007|12:08] C:\Program Files\Fichiers communs\System
[18/11/2007|12:03] C:\Program Files\Fichiers communs\Wise Installation Wizard

---------------------------[ Process ]--------------------------

... 23

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-06 19:36:32
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

[F:67][D:15]-> C:\DOCUME~1\WEBMAS~1\LOCALS~1\Temp
[F:25][D:0]-> C:\DOCUME~1\WEBMAS~1\Cookies
[F:1110][D:5]-> C:\DOCUME~1\WEBMAS~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 19:36:55,92 ]----------------------
0
Réponse 3 / 8
fiat500 Messages postés 2681 Statut Membre 82
 
ok reposte un log hijackthis
0
roni034
 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:44:49, on 06/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [pdfSaver3] "C:\Program Files\PDF-XChange 3 Pro\pdfSaver\pdfSaver3.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
0
roni034
 
j'ai l'impression que y a du mieu , c 'est confirmé au niveau du dernier post ??
merci
0
roni034
 
il y a néanmoins des pic de saturation parfois au niveau du gestionnaire des taches....
0
Réponse 4 / 8
fiat500 Messages postés 2681 Statut Membre 82
 
ok c'est propre

fais ca avec avast:

clic droit sur la petite boule A en ,puis, clic sur regalge du programme... ,puis,
mise a jour generale, mes tous sur automatique , puis,ok
encore clic droit sur la petite boule A , puis,gestion de la protection residente ,clic sur
bouclier peertopeer, et mes la sensibliter sur elever pareille pour les autres bouclier, et ok

puis lance un scan normale avec scan des archives et clic sur supprimer a chaque virus trouver!
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 8
fiat500 Messages postés 2681 Statut Membre 82
 
ta fais ce que je t'ai dit?
0
roni034
 
oui c'est en train de scanner , tu veux un post ou je supprime les virus simplement ?
0
Réponse 6 / 8
fiat500 Messages postés 2681 Statut Membre 82
 
tu supprime les virus simplement
0
Réponse 7 / 8
^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 279
 
Slt

Le log hijackthis doit être en mode normal
JAVA n'est pas à jour
Ad-Aware 2007 ► poubelle
pas de pare feu.....

0
Réponse 8 / 8
fiat500 Messages postés 2681 Statut Membre 82
 
en fera ca apres si tu veut on termine le scan et apres en fais la suite stp merci
0

Discussions similaires

Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport
Utilisateur anonyme -
TomH. -

13 réponses
écrire un rapport de travail
asi -
REGINALD -

3 réponses
Stockage autre qui saturé mon samsung
Mathis -
Mathis -

3 réponses