Effacer Virus trojan

Résolu
Bonjour,
jai ete infecter dun virus trojan
voici le rapport hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:57:44 PM, on 7/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\No-IP\DUC20.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe
C:\WINDOWS\system32\lvcomsx.exe
C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe
C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Trend Micro\PC-cillin 2002\WebTrap.EXE
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Rockstar Games\GTA San Andreas\samp.exe
C:\Downloads\Software\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Acer\OrbiCam\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe"
O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe"
O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [FTP Server] C:\TYPSOF~1\ftpserv.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\..\{32BE7C1B-735B-4824-A5E3-AB1F12F16D6E}: NameServer = 192.168.153.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{32BE7C1B-735B-4824-A5E3-AB1F12F16D6E}: NameServer = 192.168.153.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{32BE7C1B-735B-4824-A5E3-AB1F12F16D6E}: NameServer = 192.168.153.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - https://sourceforge.net/p/libusb-win32/wiki/Home/ - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NoIPDUCService - Vitalwerks LLC - C:\Program Files\No-IP\DUC20.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe

--
End of file - 8700 bytes

merci de vos aides
Configuration: Windows XP
Firefox 2.0.0.14

37 réponses

Résumé de la discussion

Un utilisateur signale une infection par un virus Trojan sur Windows XP et partage le rapport HijackThis détaillant les processus, services et éléments de démarrage suspects. Les réponses suggèrent d’installer ou mettre à jour des antivirus et d’utiliser ComboFix après renommage du fichier pour nettoyer les restes et générer un rapport de progression. Des conseils portent aussi sur la mise à jour d’Internet Explorer, l’installation d’outils complémentaires comme Malwarebytes, Avira ou Panda, et sur l’examen des éléments de démarrage et des services. Pour clore, les échanges soulignent la nécessité de sauvegarder les données, créer un point de restauration et interpréter les rapports de ComboFix et MBAM pour évaluer l’étendue de l’infection.

Bobot (l’IA à votre service)
  1. Bonjour,

    Avant de poster un rapport hijackthis, merci de suivre les conseils suivant !

    1 - Faites bien les mises à jour de tous vos logiciels.

    2 - Assurez vous de n'avoir qu'un seul antivirus d'installé.

    3 - Faites tous les scans (principalement Spybot S&D et AD Aware)

    voici les tuto pour vous aider: Tutoriel Spybot et Tutoriel AD Aware

    4 - Nettoyez votre base de registre avec CCleaner , utilisez le Tutoriel CCLeaner pour vous aider.

    5 - Redémarrez le pc.

    6 - Ouvrez juste les applications nécessaires (important)

    7 - Utilisez maintenant HiJackThis. (Hors connexion internet !)

    Ensuite vous pourrez poster votre rapport hijackthis pour que l'on puisse vous aider.
    0
    1. ah desoler, bon je fais ca de suite

      merci
      0
  2. voila, jai tous fait, avec AD Aware, il a trouver un Trojan, jai fiat la fonction "supprimer" mais apres un auter scan, il y etait toujours, voila le rapport hijackthis hors connection.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:50:29 PM, on 7/7/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\WINDOWS\system32\spoolsv.exe
    c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\libusbd-nt.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\No-IP\DUC20.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe
    C:\Program Files\Windows Media Player\WMPNetwk.exe
    C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\WINDOWS\system32\ElkCtrl.exe
    C:\WINDOWS\system32\lvcomsx.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe
    C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe
    C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Trend Micro\PC-cillin 2002\WebTrap.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\explorer.exe
    C:\Downloads\Software\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
    O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Acer\OrbiCam\InstallHelper.exe /inspect
    O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe"
    O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe"
    O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - Global Startup: Bluetooth.lnk = ?
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{32BE7C1B-735B-4824-A5E3-AB1F12F16D6E}: NameServer = 192.168.153.1
    O17 - HKLM\System\CS1\Services\Tcpip\..\{32BE7C1B-735B-4824-A5E3-AB1F12F16D6E}: NameServer = 192.168.153.1
    O17 - HKLM\System\CS2\Services\Tcpip\..\{32BE7C1B-735B-4824-A5E3-AB1F12F16D6E}: NameServer = 192.168.153.1
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - https://sourceforge.net/p/libusb-win32/wiki/Home/ - C:\WINDOWS\system32\libusbd-nt.exe
    O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
    O23 - Service: NoIPDUCService - Vitalwerks LLC - C:\Program Files\No-IP\DUC20.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe
    O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe
    0
    1. PS : Jai PC-cillin 2002 comme antivirus, mon pere dit quil est bon, est ce vrai ? si non lequel me conseiller vous ?

      Merci beaucoup de vos aides
      0
      1. je ne connais pas cet antivirus...

        Perso, j'ai maintenant NOD32, très bon antivirus, mais il est payant, alors je te conseil Avast, je l'avais avant et je n'ai pas eu de problème...
        0
      2. sinon, ten pense quoi du rapport ?
        0
        1. donc je fai 3 rapport? MalwareByte's Anti-Malware, bitdefender et panda ? les deux derniers son des antivirus, nest ca pas?
          0
          1. ah ok desoler javai pas lu le lien, je colle la rapport ici?
            0
            1. Contributeur sécurité
              tu fais malwarebyte's et après tu choisi entre l'un des deux antivirus bitdefender ou panda
              0
              1. re
                merci jlpjlp ! je scan panda est en cour, le bitdefender a buger au debut du scan, jai donc pris panda, je ne sai pas si tu le sai, ( je ni conai rien en trojan) mais je regarde le scan panda et jai vu que tout les fichier infecter se trouvai dan Document And Setting, quand le scan se termine je poste le rapport, ensuite je lancerai windows en mode sans echec et je lancerai lautre programe que tu ma conseiller, merci bcp de vos reponses

                a+
                0
                1. Contributeur sécurité
                  ok j'attends les rapports
                  0
                  1. tres bien, hier, le scan panda a buger aussi -_-, donc la sur mon ordi infecter je suis entrain de faire le scan malware qui est asser long, je poste le rapport aussitot terminer, desoler du retard

                    a+
                    0
                    1. voila le rapport

                      Malwarebytes' Anti-Malware 1.19
                      Version de la base de données: 930
                      Windows 5.1.2600 Service Pack 2

                      8:18:30 PM 7/8/2008
                      mbam-log-7-8-2008 (20-18-30).txt

                      Type de recherche: Examen complet (C:\|)
                      Eléments examinés: 95885
                      Temps écoulé: 1 hour(s), 52 minute(s), 33 second(s)

                      Processus mémoire infecté(s): 0
                      Module(s) mémoire infecté(s): 0
                      Clé(s) du Registre infectée(s): 0
                      Valeur(s) du Registre infectée(s): 0
                      Elément(s) de données du Registre infecté(s): 0
                      Dossier(s) infecté(s): 0
                      Fichier(s) infecté(s): 1

                      Processus mémoire infecté(s):
                      (Aucun élément nuisible détecté)

                      Module(s) mémoire infecté(s):
                      (Aucun élément nuisible détecté)

                      Clé(s) du Registre infectée(s):
                      (Aucun élément nuisible détecté)

                      Valeur(s) du Registre infectée(s):
                      (Aucun élément nuisible détecté)

                      Elément(s) de données du Registre infecté(s):
                      (Aucun élément nuisible détecté)

                      Dossier(s) infecté(s):
                      (Aucun élément nuisible détecté)

                      Fichier(s) infecté(s):
                      C:\Documents and Settings\Valentin\results.txt (Malware.Trace) -> Quarantined and deleted successfully.
                      0
                      1. je recomence le scan bitdefender

                        merci de vos aides en tout cas !
                        0
                        1. Contributeur sécurité
                          ok

                          colle le rapport d'un scan en ligne
                          avec un des suivants:

                          bitdefender en ligne :
                          http://www.bitdefender.fr/scan_fr/scan8/ie.html

                          Panda en ligne :
                          http://pandasoftware.fr
                          0
                          1. je vien du faire un scan bitdefender, mais je ne trouve pas le log

                            a+
                            0
                            1. comme antivrus je viens dinstaller Antivir, il a dectecter et effacer des fichiers qui netait pas detecter du mon ancien antivirus, PC-Sillin 2002, on ne ma pas conseiller Bitdefender antivirus, il parait quil ralentie beaucoup le systeme... Dois je quand meme linstaler temporairement ?

                              merci

                              a+
                              0
                              1. voila le log de Antivir, si ca peut taider...

                                Avira AntiVir Personal
                                Report file date: Tuesday, July 08, 2008 22:09

                                Scanning for 1393731 virus strains and unwanted programs.

                                Licensed to: Avira AntiVir PersonalEdition Classic
                                Serial number: 0000149996-ADJIE-0001
                                Platform: Windows XP
                                Windows version: (Service Pack 2) [5.1.2600]
                                Boot mode: Normally booted
                                Username: SYSTEM
                                Computer name: PC-VALENTIN

                                Version information:
                                BUILD.DAT : 8.1.00.295 16479 Bytes 4/9/2008 16:24:00
                                AVSCAN.EXE : 8.1.2.12 311553 Bytes 3/18/2008 08:02:56
                                AVSCAN.DLL : 8.1.1.0 53505 Bytes 2/7/2008 07:43:37
                                LUKE.DLL : 8.1.2.9 151809 Bytes 2/28/2008 07:41:23
                                LUKERES.DLL : 8.1.2.1 12033 Bytes 2/21/2008 07:28:40
                                ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 09:33:34
                                ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 6/24/2008 18:31:53
                                ANTIVIR2.VDF : 7.0.5.51 273408 Bytes 7/4/2008 18:32:00
                                ANTIVIR3.VDF : 7.0.5.70 202240 Bytes 7/8/2008 18:32:06
                                Engineversion : 8.1.0.64
                                AEVDF.DLL : 8.1.0.5 102772 Bytes 2/25/2008 08:58:21
                                AESCRIPT.DLL : 8.1.0.46 283002 Bytes 7/8/2008 18:33:00
                                AESCN.DLL : 8.1.0.22 119157 Bytes 7/8/2008 18:32:57
                                AERDL.DLL : 8.1.0.20 418165 Bytes 7/8/2008 18:32:55
                                AEPACK.DLL : 8.1.1.6 364918 Bytes 7/8/2008 18:32:49
                                AEOFFICE.DLL : 8.1.0.20 192891 Bytes 7/8/2008 18:32:44
                                AEHEUR.DLL : 8.1.0.35 1298806 Bytes 7/8/2008 18:32:38
                                AEHELP.DLL : 8.1.0.15 115063 Bytes 7/8/2008 18:32:21
                                AEGEN.DLL : 8.1.0.29 307573 Bytes 7/8/2008 18:32:19
                                AEEMU.DLL : 8.1.0.6 430451 Bytes 7/8/2008 18:32:15
                                AECORE.DLL : 8.1.0.32 168311 Bytes 7/8/2008 18:32:11
                                AVWINLL.DLL : 1.0.0.7 14593 Bytes 1/23/2008 16:07:53
                                AVPREF.DLL : 8.0.0.1 25857 Bytes 2/18/2008 09:37:50
                                AVREP.DLL : 7.0.0.1 155688 Bytes 4/16/2007 12:26:47
                                AVREG.DLL : 8.0.0.0 30977 Bytes 1/23/2008 16:07:49
                                AVARKT.DLL : 1.0.0.23 307457 Bytes 2/12/2008 07:29:23
                                AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 2/28/2008 07:31:31
                                SQLITE3.DLL : 3.3.17.1 339968 Bytes 1/22/2008 16:28:02
                                SMTPLIB.DLL : 1.2.0.19 28929 Bytes 1/23/2008 16:08:39
                                NETNT.DLL : 8.0.0.1 7937 Bytes 1/25/2008 11:05:10
                                RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 3/10/2008 13:37:25
                                RCTEXT.DLL : 8.0.32.0 86273 Bytes 3/6/2008 11:02:11

                                Configuration settings for the scan:
                                Jobname..........................: Complete system scan
                                Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
                                Logging..........................: low
                                Primary action...................: interactive
                                Secondary action.................: ignore
                                Scan master boot sector..........: on
                                Scan boot sector.................: on
                                Boot sectors.....................: C:,
                                Scan memory......................: on
                                Process scan.....................: on
                                Scan registry....................: on
                                Search for rootkits..............: off
                                Scan all files...................: Intelligent file selection
                                Scan archives....................: on
                                Recursion depth..................: 20
                                Smart extensions.................: on
                                Macro heuristic..................: on
                                File heuristic...................: medium

                                Start of the scan: Tuesday, July 08, 2008 22:09

                                The scan of running processes will be started
                                Scan process 'imapi.exe' - '1' Module(s) have been scanned
                                Scan process 'avscan.exe' - '1' Module(s) have been scanned
                                Scan process 'avscan.exe' - '1' Module(s) have been scanned
                                Scan process 'explorer.exe' - '1' Module(s) have been scanned
                                Scan process 'avcenter.exe' - '1' Module(s) have been scanned
                                Scan process 'WLLoginProxy.exe' - '1' Module(s) have been scanned
                                Scan process 'sched.exe' - '1' Module(s) have been scanned
                                Scan process 'avgnt.exe' - '1' Module(s) have been scanned
                                Scan process 'avguard.exe' - '1' Module(s) have been scanned
                                Scan process 'unsecapp.exe' - '1' Module(s) have been scanned
                                Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
                                Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
                                Scan process 'alg.exe' - '1' Module(s) have been scanned
                                Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned
                                Scan process 'iPodService.exe' - '1' Module(s) have been scanned
                                Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned
                                Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
                                Scan process 'DUC20.exe' - '1' Module(s) have been scanned
                                Scan process 'MDM.EXE' - '1' Module(s) have been scanned
                                Scan process 'libusbd-nt.exe' - '1' Module(s) have been scanned
                                Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                Scan process 'btwdins.exe' - '1' Module(s) have been scanned
                                Scan process 'BTTray.exe' - '1' Module(s) have been scanned
                                Scan process 'Acer.Empowering.Framework.Launcher.exe' - '1' Module(s) have been scanned
                                Scan process 'SuperCopier2.exe' - '1' Module(s) have been scanned
                                Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
                                Scan process 'ePresentation.exe' - '1' Module(s) have been scanned
                                Scan process 'rundll32.exe' - '1' Module(s) have been scanned
                                Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
                                Scan process 'MemCheck.exe' - '1' Module(s) have been scanned
                                Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned
                                Scan process 'jusched.exe' - '1' Module(s) have been scanned
                                Scan process 'RTHDCPL.exe' - '1' Module(s) have been scanned
                                Scan process 'ElkCtrl.exe' - '1' Module(s) have been scanned
                                Scan process 'CameraAssistant.exe' - '1' Module(s) have been scanned
                                Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
                                Scan process 'AGRSMMSG.exe' - '1' Module(s) have been scanned
                                Scan process 'rundll32.exe' - '1' Module(s) have been scanned
                                Scan process 'LVPrcSrv.exe' - '1' Module(s) have been scanned
                                Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
                                Scan process 'aawservice.exe' - '1' Module(s) have been scanned
                                Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                Scan process 'lsass.exe' - '1' Module(s) have been scanned
                                Scan process 'services.exe' - '1' Module(s) have been scanned
                                Scan process 'winlogon.exe' - '1' Module(s) have been scanned
                                Scan process 'csrss.exe' - '1' Module(s) have been scanned
                                Scan process 'smss.exe' - '1' Module(s) have been scanned
                                53 processes with 53 modules were scanned

                                Starting master boot sector scan:
                                Master boot sector HD0
                                [INFO] No virus was found!

                                Start scanning boot sectors:
                                Boot sector 'C:\'
                                [INFO] No virus was found!

                                Starting to scan the registry.
                                The registry was scanned ( '37' files ).

                                Starting the file scan:

                                Begin scan in 'C:\'
                                C:\pagefile.sys
                                [WARNING] The file could not be opened!
                                [0] Archive type: ZIP
                                --> virtual_girls_1.exe
                                [DETECTION] Is the Trojan horse TR/Clicker.HB
                                --> virtual_girls_1.exe
                                [1] Archive type: RAR SFX (self extracting)
                                --> eToroDownloader.exe
                                [2] Archive type: RSRC
                                --> Object
                                [DETECTION] Is the Trojan horse TR/Dropper.Gen
                                [NOTE] The file was deleted!

                                End of the scan: Tuesday, July 08, 2008 22:36
                                Used time: 27:51 min

                                The scan has been done completely.

                                5470 Scanning directories
                                269411 Files were scanned
                                2 viruses and/or unwanted programs were found
                                0 Files were classified as suspicious:
                                1 files were deleted
                                0 files were repaired
                                0 files were moved to quarantine
                                0 files were renamed
                                1 Files cannot be scanned
                                269409 Files not concerned
                                1364 Archives were scanned
                                1 Warnings
                                1 Notes
                                0
                                1. Contributeur sécurité
                                  ok par contre antivir et ton antivirus risquent de rentrer en conflit alors n'en garde qu'un

                                  bitdefender free ne fais pas d'analyse en temps reel c'est pourquoi je te le proposé

                                  mais bon avec antivir cela va

                                  vire ce qui est en quarantaine dans antivir

                                  et ne garde qu'un antivirus!!!

                                  recolle un hijakchits et dis tes soucis actuels
                                  0
                                  • 1
                                  • 2