Rapport Hijackthis

Pilou_le_picard Messages postés 413 Statut Membre -  
 Utilisateur anonyme -
Bonjour,

Voici le rapport

Pouvez vous me dire ce qui ne va pas

Car j'ai beaucoup de fenêtre(pub) intenpestive qui s'affiche

Merci!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\DOCUME~1\Johan\LOCALS~1\Temp\Répertoire temporaire 1 pour HiJackThis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: DNSProxyObj Class - {06594350-D723-11D8-9669-0800200C9A66} - c:\windows\system32\DNSProxy.dll (file missing)
O2 - BHO: (no name) - {5A194C7A-D358-4B17-B6F6-E905187C3E94} - C:\WINDOWS\system32\tuvSjGAr.dll (file missing)
O2 - BHO: (no name) - {5FF30032-DFE9-4172-906D-8FD1EF406174} - C:\WINDOWS\system32\vtUlKAPf.dll (file missing)
O2 - BHO: (no name) - {657FE57A-1AC8-455E-9651-51044228C11A} - C:\WINDOWS\system32\efcbaxwW.dll (file missing)
O2 - BHO: (no name) - {6F191640-5EFB-4026-8DC1-2CE91E74D5AC} - C:\WINDOWS\system32\ddcYpnKe.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: {24e32c7e-ffe7-11fa-2a94-23ed90a38d08} - {80d83a09-de32-49a2-af11-7effe7c23e42} - C:\WINDOWS\system32\pwjavlay.dll
O2 - BHO: (no name) - {8A290466-39BD-419B-93DB-0E9599506654} - C:\WINDOWS\system32\tuvvwttU.dll (file missing)
O2 - BHO: (no name) - {8FCDBA3A-D5C8-4721-95C8-31FE3217B800} - C:\WINDOWS\system32\pmnnkhET.dll (file missing)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {9B45EFFF-4913-40EA-AFFD-4CC37975B3E6} - C:\WINDOWS\system32\efcCtqPH.dll (file missing)
O2 - BHO: (no name) - {9FFE7CAB-EFBE-481F-8220-F770C1B50C95} - C:\WINDOWS\system32\opnlLExw.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [a09aa870] rundll32.exe "C:\WINDOWS\system32\yjkeavuf.dll",b
O4 - HKLM\..\Run: [BMa3a99bec] Rundll32.exe "C:\WINDOWS\system32\bshhxdrp.dll",s
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BMa3a99bec] Rundll32.exe "C:\WINDOWS\system32\bshhxdrp.dll",s
O4 - Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - Winlogon Notify: efcbaxwW - efcbaxwW.dll (file missing)
O20 - Winlogon Notify: opnlLExw - opnlLExw.dll (file missing)
O20 - Winlogon Notify: tuvvwttU - tuvvwttU.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
Configuration: Windows XP
Internet Explorer 6.0

5 réponses

  1. Utilisateur anonyme
     
    Salut

    c est du a ton infection vundo

    Telecharge malwarebytes

    -> http://www.malwarebytes.org/mbam/program/mbam-setup.exe

    Tu l´instale; le programme va se mettre automatiquement a jour.

    Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

    Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".

    Puis click sur "rechercher".

    Laisse le scanner le pc...

    Si des elements on ete trouvés > click sur supprimer la selection.

    si il t´es demandé de redemarrer > click sur "yes".

    A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.

    Copie et colle le rapport stp.

    ps : les rapport sont aussi rangé dans l onglet rapport/log
    0
    1. Pilou_le_picard Messages postés 413 Statut Membre 31
       
      Salut,

      Merci de prendre du temps pour m'aider

      Voici le rapport que j'ai obtenu

      Malwarebytes' Anti-Malware 1.20
      Version de la base de données: 938
      Windows 5.1.2600 Service Pack 2

      16:15:00 11/07/2008
      mbam-log-7-11-2008 (16-14-52).txt

      Type de recherche: Examen complet (C:\|D:\|)
      Eléments examinés: 154800
      Temps écoulé: 37 minute(s), 31 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 1
      Clé(s) du Registre infectée(s): 25
      Valeur(s) du Registre infectée(s): 4
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 3
      Fichier(s) infecté(s): 72

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      C:\WINDOWS\system32\yjkeavuf.dll (Trojan.Vundo) -> No action taken.

      Clé(s) du Registre infectée(s):
      HKEY_CLASSES_ROOT\CLSID\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> No action taken.
      HKEY_CLASSES_ROOT\AppID\{127df9b4-d75d-44a6-af78-8c3a8ceb03db} (Adware.WhenUSave) -> No action taken.
      HKEY_CLASSES_ROOT\acm.acmfactory (Adware.WhenUSave) -> No action taken.
      HKEY_CLASSES_ROOT\acm.acmfactory.1 (Adware.WhenUSave) -> No action taken.
      HKEY_CLASSES_ROOT\CLSID\{a9aae1ab-9688-42c5-86f5-c12f6b9015ad} (Adware.WhenUSave) -> No action taken.
      HKEY_CLASSES_ROOT\Interface\{43382522-a846-46f4-ac57-1f71ae6e1086} (Adware.WhenUSave) -> No action taken.
      HKEY_CLASSES_ROOT\Interface\{572fb162-c0ba-4edf-8cff-e3846153b9b0} (Adware.WhenUSave) -> No action taken.
      HKEY_CLASSES_ROOT\Interface\{72a836d1-bc00-43c0-a941-17960e4fb842} (Adware.WhenUSave) -> No action taken.
      HKEY_CLASSES_ROOT\Typelib\{df901432-1b9f-4f5b-9e56-301c553f9095} (Adware.WhenUSave) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> No action taken.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> No action taken.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
      HKEY_CLASSES_ROOT\mywebsearchwbbar.settingsplugin (Adware.MyWebSearch) -> No action taken.
      HKEY_CLASSES_ROOT\mywebsearchwbbar.settingsplugin.1 (Adware.MyWebSearch) -> No action taken.
      HKEY_CLASSES_ROOT\mywebsearchwbbar.toolbarplugin (Adware.MyWebSearch) -> No action taken.
      HKEY_CLASSES_ROOT\mywebsearchwbbar.toolbarplugin.1 (Adware.MyWebSearch) -> No action taken.
      HKEY_CLASSES_ROOT\mywebsearchwbtoolbar.temperaturebarbutton (Adware.MyWebSearch) -> No action taken.
      HKEY_CLASSES_ROOT\mywebsearchwbtoolbar.temperaturebarbutton.1 (Adware.MyWebSearch) -> No action taken.
      HKEY_CLASSES_ROOT\AppID\ACM.DLL (Adware.WhenUSave) -> No action taken.
      HKEY_CLASSES_ROOT\WUSN.1 (Adware.WhenUSave) -> No action taken.

      Valeur(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\a09aa870 (Trojan.Vundo) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bma3a99bec (Trojan.Agent) -> No action taken.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bma3a99bec (Trojan.Agent) -> No action taken.

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      C:\Program Files\winvi (Adware.SoftMate) -> No action taken.
      C:\Program Files\winvi\dsktp (Adware.SoftMate) -> No action taken.
      C:\WINDOWS\system32\dFrnx05 (Trojan.Agent) -> No action taken.

      Fichier(s) infecté(s):
      C:\WINDOWS\system32\abwiljuq.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\qujliwba.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\csucgugb.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\bgugcusc.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\dmkfgprb.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\brpgfkmd.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\ewsjsaba.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\abasjswe.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\gfbbcjbt.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\tbjcbbfg.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\hbeyyckw.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\wkcyyebh.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\heybycxa.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\axcybyeh.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\iievjhuq.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\quhjveii.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\jcwjxkyq.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\qykxjwcj.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\lrfclale.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\elalcfrl.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\lstdvabh.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\hbavdtsl.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\mhwtgxfh.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\hfxgtwhm.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\nfnfunvs.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\svnufnfn.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\nislrich.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\hcirlsin.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\ofwbbraf.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\farbbwfo.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\pumgnqsn.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\nsqngmup.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\qtegocjo.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\ojcogetq.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\tkcvevnt.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\tnvevckt.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\tmvintrb.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\brtnivmt.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\tscgmgql.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\lqgmgcst.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\ukjtaise.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\esiatjku.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\uwgmbhkh.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\hkhbmgwu.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\womvupql.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\lqpuvmow.ini (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\yjkeavuf.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\fuvaekjy.ini (Trojan.Vundo) -> No action taken.
      C:\Documents and Settings\jimmy et morgane\Local Settings\Temporary Internet Files\Content.IE5\OL6FSH2N\kb713501[1] (Trojan.LowZones) -> No action taken.
      C:\Documents and Settings\jimmy et morgane\Local Settings\Temporary Internet Files\Content.IE5\XMWIPKIM\CAWF2RUL (Trojan.Vundo) -> No action taken.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP322\A0100097.exe (Trojan.Downloader) -> No action taken.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP322\A0100100.exe (Trojan.Downloader) -> No action taken.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113238.exe (Trojan.LowZones) -> No action taken.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113239.exe (Trojan.LowZones) -> No action taken.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113240.exe (Trojan.LowZones) -> No action taken.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113241.exe (Trojan.LowZones) -> No action taken.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113243.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\dFrnx05\dFrnx051080.exe (Trojan.Downloader) -> No action taken.
      C:\WINDOWS\system32\emL1\roEbdll2.exe (Trojan.StartPage) -> No action taken.
      C:\Program Files\winvi\version.ini (Adware.SoftMate) -> No action taken.
      C:\Program Files\winvi\dsktp\AC_RunActiveContent.js (Adware.SoftMate) -> No action taken.
      C:\Program Files\winvi\dsktp\desktop.html (Adware.SoftMate) -> No action taken.
      C:\Program Files\winvi\dsktp\internetDetection.swf (Adware.SoftMate) -> No action taken.
      C:\Program Files\winvi\dsktp\settings.sol (Adware.SoftMate) -> No action taken.
      C:\WINDOWS\cookies.ini (Malware.Trace) -> No action taken.
      C:\WINDOWS\system32\bshhxdrp.dll (Trojan.Agent) -> No action taken.
      C:\WINDOWS\system32\pac.txt (Malware.Trace) -> No action taken.
      C:\WINDOWS\system32\cbXQhFXO.dll (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\BMa3a99bec.xml (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\BMa3a99bec.txt (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> No action taken.
      C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> No action taken.
      0
  2. Utilisateur anonyme
     
    de rien

    No action taken

    t as rien supprimé ..
    0
    1. Pilou_le_picard Messages postés 413 Statut Membre 31
       
      Oups oui ^^

      Malwarebytes' Anti-Malware 1.20
      Version de la base de données: 938
      Windows 5.1.2600 Service Pack 2

      16:23:06 11/07/2008
      mbam-log-7-11-2008 (16-23-06).txt

      Type de recherche: Examen complet (C:\|D:\|)
      Eléments examinés: 154800
      Temps écoulé: 37 minute(s), 31 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 1
      Clé(s) du Registre infectée(s): 25
      Valeur(s) du Registre infectée(s): 4
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 3
      Fichier(s) infecté(s): 72

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      C:\WINDOWS\system32\yjkeavuf.dll (Trojan.Vundo) -> Unloaded module successfully.

      Clé(s) du Registre infectée(s):
      HKEY_CLASSES_ROOT\CLSID\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\AppID\{127df9b4-d75d-44a6-af78-8c3a8ceb03db} (Adware.WhenUSave) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\acm.acmfactory (Adware.WhenUSave) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\acm.acmfactory.1 (Adware.WhenUSave) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{a9aae1ab-9688-42c5-86f5-c12f6b9015ad} (Adware.WhenUSave) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{43382522-a846-46f4-ac57-1f71ae6e1086} (Adware.WhenUSave) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{572fb162-c0ba-4edf-8cff-e3846153b9b0} (Adware.WhenUSave) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{72a836d1-bc00-43c0-a941-17960e4fb842} (Adware.WhenUSave) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Typelib\{df901432-1b9f-4f5b-9e56-301c553f9095} (Adware.WhenUSave) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\mywebsearchwbbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\mywebsearchwbbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\mywebsearchwbbar.toolbarplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\mywebsearchwbbar.toolbarplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\mywebsearchwbtoolbar.temperaturebarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\mywebsearchwbtoolbar.temperaturebarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\AppID\ACM.DLL (Adware.WhenUSave) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\WUSN.1 (Adware.WhenUSave) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\a09aa870 (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bma3a99bec (Trojan.Agent) -> Delete on reboot.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bma3a99bec (Trojan.Agent) -> Quarantined and deleted successfully.

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      C:\Program Files\winvi (Adware.SoftMate) -> Quarantined and deleted successfully.
      C:\Program Files\winvi\dsktp (Adware.SoftMate) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\dFrnx05 (Trojan.Agent) -> Quarantined and deleted successfully.

      Fichier(s) infecté(s):
      C:\WINDOWS\system32\abwiljuq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\qujliwba.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\csucgugb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\bgugcusc.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\dmkfgprb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\brpgfkmd.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\ewsjsaba.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\abasjswe.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\gfbbcjbt.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\tbjcbbfg.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\hbeyyckw.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\wkcyyebh.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\heybycxa.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\axcybyeh.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\iievjhuq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\quhjveii.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\jcwjxkyq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\qykxjwcj.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\lrfclale.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\elalcfrl.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\lstdvabh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\hbavdtsl.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\mhwtgxfh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\hfxgtwhm.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\nfnfunvs.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\svnufnfn.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\nislrich.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\hcirlsin.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\ofwbbraf.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\farbbwfo.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\pumgnqsn.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\nsqngmup.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\qtegocjo.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\ojcogetq.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\tkcvevnt.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\tnvevckt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\tmvintrb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\brtnivmt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\tscgmgql.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\lqgmgcst.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\ukjtaise.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\esiatjku.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\uwgmbhkh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\hkhbmgwu.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\womvupql.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\lqpuvmow.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\yjkeavuf.dll (Trojan.Vundo) -> Delete on reboot.
      C:\WINDOWS\system32\fuvaekjy.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\Documents and Settings\jimmy et morgane\Local Settings\Temporary Internet Files\Content.IE5\OL6FSH2N\kb713501[1] (Trojan.LowZones) -> Quarantined and deleted successfully.
      C:\Documents and Settings\jimmy et morgane\Local Settings\Temporary Internet Files\Content.IE5\XMWIPKIM\CAWF2RUL (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP322\A0100097.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP322\A0100100.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113238.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113239.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113240.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113241.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113243.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\dFrnx05\dFrnx051080.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\emL1\roEbdll2.exe (Trojan.StartPage) -> Quarantined and deleted successfully.
      C:\Program Files\winvi\version.ini (Adware.SoftMate) -> Quarantined and deleted successfully.
      C:\Program Files\winvi\dsktp\AC_RunActiveContent.js (Adware.SoftMate) -> Quarantined and deleted successfully.
      C:\Program Files\winvi\dsktp\desktop.html (Adware.SoftMate) -> Quarantined and deleted successfully.
      C:\Program Files\winvi\dsktp\internetDetection.swf (Adware.SoftMate) -> Quarantined and deleted successfully.
      C:\Program Files\winvi\dsktp\settings.sol (Adware.SoftMate) -> Quarantined and deleted successfully.
      C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\bshhxdrp.dll (Trojan.Agent) -> Delete on reboot.
      C:\WINDOWS\system32\pac.txt (Malware.Trace) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\cbXQhFXO.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\BMa3a99bec.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\BMa3a99bec.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
      0
    2. Pilou_le_picard Messages postés 413 Statut Membre 31
       
      Désolé j'avais posté le mauvais rapport ^^
      0
  3. Utilisateur anonyme
     
    réouvre malewarebyte
    va sur quarantaine
    supprime tout

    Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    -> Double clique combofix.exe.
    -> Tape sur la touche 1 (Yes) pour démarrer le scan.
    -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    Avant d'utiliser ComboFix :

    -> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

    -> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

    Une fois fait, sur ton bureau double-clic sur Combofix.exe.

    - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

    /!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

    - En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

    - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

    -> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

    -> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

    -> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
    0
    1. Pilou_le_picard Messages postés 413 Statut Membre 31
       
      Voilà le rapport

      Merci de votre patience ^^

      ComboFix 08-07-10.1 - Johan 2008-07-11 16:55:49.1 - NTFSx86
      Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.155 [GMT 2:00]
      Endroit: C:\Documents and Settings\Johan\Bureau\ComboFix.exe
      * Création d'un nouveau point de restauration
      .

      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .

      C:\Temp\1cb
      C:\Temp\1cb\syscheck.log
      C:\Temp\tmpvc14
      C:\Temp\tmpvc14\dllvc.log
      C:\WINDOWS\Downloaded Program Files\setup.inf
      C:\WINDOWS\pskt.ini
      C:\WINDOWS\system32\aaqqebkv.ini
      C:\WINDOWS\system32\ajmwlfsg.ini
      C:\WINDOWS\system32\aknakpkg.dll
      C:\WINDOWS\system32\aojngpao.dll
      C:\WINDOWS\system32\blhobyiv.ini
      C:\WINDOWS\system32\bvudpqyv.ini
      C:\WINDOWS\system32\bwamptwk.dll
      C:\WINDOWS\system32\cjqgov.dll
      C:\WINDOWS\system32\crhqnrua.dll
      C:\WINDOWS\system32\djwryhbn.dll
      C:\WINDOWS\system32\egekwgwn.dll
      C:\WINDOWS\system32\eKnpYcdd.ini
      C:\WINDOWS\system32\eKnpYcdd.ini2
      C:\WINDOWS\system32\essabwtx.dll
      C:\WINDOWS\system32\fPAKlUtv.ini
      C:\WINDOWS\system32\fPAKlUtv.ini2
      C:\WINDOWS\system32\fuaripsl.dll
      C:\WINDOWS\system32\fwygtqvr.dll
      C:\WINDOWS\system32\gwpeedec.dll
      C:\WINDOWS\system32\HPqtCcfe.ini
      C:\WINDOWS\system32\HPqtCcfe.ini2
      C:\WINDOWS\system32\imixshai.dll
      C:\WINDOWS\system32\ixmadbgj.dll
      C:\WINDOWS\system32\kiirrawa.dll
      C:\WINDOWS\system32\kiqvlvvx.dll
      C:\WINDOWS\system32\kjfmnjgc.dll
      C:\WINDOWS\system32\kulapnwq.dll
      C:\WINDOWS\system32\lebicfkv.dll
      C:\WINDOWS\system32\lguidben.dll
      C:\WINDOWS\system32\mcrh.tmp
      C:\WINDOWS\system32\MSINET.oca
      C:\WINDOWS\system32\nfocgmmw.ini
      C:\WINDOWS\system32\nihgdtce.ini
      C:\WINDOWS\system32\nqjbpnhk.dll
      C:\WINDOWS\system32\obbzou.dll
      C:\WINDOWS\system32\oeminfo.ini
      C:\WINDOWS\system32\ouqlrgyy.dll
      C:\WINDOWS\system32\ovnattyw.dll
      C:\WINDOWS\system32\padlaglb.dll
      C:\WINDOWS\system32\pntmclhi.dll
      C:\WINDOWS\system32\psvyncae.dll
      C:\WINDOWS\system32\pwjavlay.dll
      C:\WINDOWS\system32\qtijcjbc.ini
      C:\WINDOWS\system32\rAGjSvut.ini
      C:\WINDOWS\system32\rAGjSvut.ini2
      C:\WINDOWS\system32\rarijuyg.dll
      C:\WINDOWS\system32\rerpvmle.dll
      C:\WINDOWS\system32\ruyshuuk.dll
      C:\WINDOWS\system32\savvhhma.dll
      C:\WINDOWS\system32\TEhknnmp.ini
      C:\WINDOWS\system32\TEhknnmp.ini2
      C:\WINDOWS\system32\tjubkjoy.dll
      C:\WINDOWS\system32\trayamtn.dll
      C:\WINDOWS\system32\upuwlkkn.dll
      C:\WINDOWS\system32\ussekvoq.dll
      C:\WINDOWS\system32\utyeokyf.dll
      C:\WINDOWS\system32\whslfbsk.dll
      C:\WINDOWS\system32\xjjaosie.dll
      C:\WINDOWS\system32\xprnmofp.dll
      C:\WINDOWS\system32\xtwbasse.tmp
      C:\WINDOWS\system32\xxxqpqia.dll
      C:\WINDOWS\system32\yckfstge.dll
      C:\WINDOWS\system32\ydennlpn.ini
      C:\WINDOWS\system32\ykimiavn.ini
      C:\WINDOWS\system32\ykipstyc.dll
      C:\WINDOWS\system32\ymrhhktw.dll
      C:\WINDOWS\system32\ypuumjxi.ini
      D:\Autorun.inf

      .
      ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-11 to 2008-07-11 ))))))))))))))))))))))))))))))))))))
      .

      2008-07-11 15:31 . 2008-07-11 15:31 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
      2008-07-11 15:31 . 2008-07-11 15:31 <REP> d-------- C:\Documents and Settings\Johan\Application Data\Malwarebytes
      2008-07-11 15:31 . 2008-07-11 15:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
      2008-07-11 15:31 . 2008-07-07 17:35 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
      2008-07-11 15:31 . 2008-07-07 17:35 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
      2008-07-07 11:26 . 2008-07-07 11:26 268 --ah----- C:\sqmdata14.sqm
      2008-07-07 11:26 . 2008-07-07 11:26 244 --ah----- C:\sqmnoopt14.sqm
      2008-07-04 10:19 . 2008-07-04 10:19 268 --ah----- C:\sqmdata13.sqm
      2008-07-04 10:19 . 2008-07-04 10:19 244 --ah----- C:\sqmnoopt13.sqm
      2008-06-15 17:39 . 2008-06-15 17:39 <REP> d-------- C:\Documents and Settings\jimmy et morgane\Application Data\Grisoft

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-07-07 09:19 --------- d-----w C:\Program Files\Win-X-Defender
      2008-06-30 18:20 --------- d-----w C:\Program Files\Google
      2008-06-10 10:42 --------- d-----w C:\Documents and Settings\Thibault\Application Data\Grisoft
      2008-06-09 16:41 --------- d-----w C:\Program Files\CCleaner
      2008-06-09 14:34 --------- d-----w C:\Documents and Settings\CYNTHIA 2\Application Data\Grisoft
      2008-06-09 14:04 --------- d-----w C:\Program Files\InternetX
      2008-06-09 13:46 --------- d--h--w C:\Program Files\InstallShield Installation Information
      2008-06-09 13:43 --------- d-----w C:\Program Files\Windows Live Toolbar
      2008-06-09 13:34 --------- d-----w C:\Program Files\Windows Live
      2008-06-09 12:47 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
      2008-06-09 12:39 --------- d-----w C:\Program Files\AWS
      2008-06-09 12:35 --------- d-----w C:\Documents and Settings\Johan\Application Data\muvee Technologies
      2008-06-09 12:35 --------- d-----w C:\Documents and Settings\All Users\Application Data\muvee Technologies
      2008-06-09 12:27 --------- d-----w C:\Documents and Settings\Johan\Application Data\Grisoft
      2008-06-09 12:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
      2008-06-09 12:19 --------- d-----w C:\Program Files\Lavalys
      2008-06-05 10:57 --------- d-----w C:\Documents and Settings\Thibault\Application Data\Spyware Terminator
      2008-05-28 18:36 --------- d-----w C:\Documents and Settings\CYNTHIA 2\Application Data\Spyware Terminator
      2008-05-28 11:33 --------- d-----w C:\Documents and Settings\Thibault\Application Data\Win-X-Defender
      2008-05-26 21:16 --------- d-----w C:\Documents and Settings\alzira\Application Data\Spyware Terminator
      2008-05-26 21:09 --------- d-----w C:\Documents and Settings\Thibault\Application Data\MSNInstaller
      2008-05-22 11:04 --------- d-----w C:\Documents and Settings\jimmy et morgane\Application Data\Spyware Terminator
      2008-05-21 15:43 --------- d-----w C:\Documents and Settings\NetworkService\Application Data\Spyware Terminator
      2008-05-21 11:20 --------- d-----w C:\Documents and Settings\CYNTHIA 2\Application Data\LimeWire
      2008-05-18 19:14 --------- d-----w C:\Documents and Settings\jimmy et morgane\Application Data\LimeWire
      2008-05-17 20:32 --------- d-----w C:\Program Files\Sun
      2008-05-17 20:32 --------- d-----w C:\Program Files\Java
      2007-02-08 07:22 7,580 -c--a-w C:\Program Files\Mon thème favori.theme
      2006-08-07 22:43 560 -c--a-w C:\Program Files\Global.sw
      2005-07-14 11:31 27,648 -csha-r C:\WINDOWS\system32\AVSredirect.dll
      2005-06-26 14:32 616,448 -csha-r C:\WINDOWS\system32\cygwin1.dll
      2005-06-21 21:37 45,568 -csha-r C:\WINDOWS\system32\cygz.dll
      2005-09-10 21:28 573,430 -csha-r C:\WINDOWS\system32\smab.dll
      2005-02-28 12:16 240,128 -csha-r C:\WINDOWS\system32\x.264.exe
      .

      ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      REGEDIT4
      *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-09-03 16:18 94208]
      "MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
      "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-27 15:16 68856]
      "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 20:00 15360]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 18:04 52736]
      "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-14 05:05 344064]
      "HPHUPD08"="c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 08:35 49152]
      "KBD"="C:\HP\KBD\KBD.EXE" [2005-02-03 01:44 61440]
      "Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2005-07-22 23:14 237568]
      "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 12:50 155648]
      "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2005-01-02 23:51 180269]
      "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
      "AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 22:47 57344 C:\WINDOWS\ALCXMNTR.EXE]

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
      "%windir%\\system32\\sessmgr.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
      "C:\\Program Files\\Messenger\\msmsgs.exe"=
      "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
      "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

      R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
      R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
      R3 CAM1210;USB Video Camera Driver v1.53;C:\WINDOWS\system32\Drivers\cam1210.sys [2007-08-30 11:49]
      R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 07:08]
      S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 23:58]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4aba4cb6-e88b-11dc-8d4b-0013d3dee44c}]
      \Shell\AutoRun\command - J:\InstallTomTomHOME.exe

      .
      Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
      "2008-07-09 17:37:08 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
      - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
      .
      - - - - ORPHANS REMOVED - - - -

      BHO-{5A194C7A-D358-4B17-B6F6-E905187C3E94} - C:\WINDOWS\system32\tuvSjGAr.dll
      BHO-{5FF30032-DFE9-4172-906D-8FD1EF406174} - C:\WINDOWS\system32\vtUlKAPf.dll
      BHO-{6F191640-5EFB-4026-8DC1-2CE91E74D5AC} - C:\WINDOWS\system32\ddcYpnKe.dll
      BHO-{8FCDBA3A-D5C8-4721-95C8-31FE3217B800} - C:\WINDOWS\system32\pmnnkhET.dll
      BHO-{9B45EFFF-4913-40EA-AFFD-4CC37975B3E6} - C:\WINDOWS\system32\efcCtqPH.dll
      BHO-{9FFE7CAB-EFBE-481F-8220-F770C1B50C95} - C:\WINDOWS\system32\opnlLExw.dll
      HKLM-Run-PCDrProfiler - (no file)
      HKLM-Run-NWEReboot - (no file)
      ShellExecuteHooks-{9FFE7CAB-EFBE-481F-8220-F770C1B50C95} - C:\WINDOWS\system32\opnlLExw.dll
      Notify-efcbaxwW - efcbaxwW.dll
      Notify-opnlLExw - opnlLExw.dll
      Notify-tuvvwttU - tuvvwttU.dll


      **************************************************************************

      catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-07-11 17:17:01
      Windows 5.1.2600 Service Pack 2 NTFS

      Balayage processus cach‚s ...

      Balayage cach‚ autostart entries ...

      Balayage des fichiers cach‚s ...


      **************************************************************************
      .
      ------------------------ Other Running Processes ------------------------
      .
      C:\WINDOWS\system32\ati2evxx.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\ati2evxx.exe
      C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
      .
      **************************************************************************
      .
      Temps d'accomplissement: 2008-07-11 17:20:52 - machine was rebooted [Johan]
      ComboFix-quarantined-files.txt 2008-07-11 15:19:47

      Pre-Run: 175,198,011,392 octets libres
      Post-Run: 176,283,602,944 octets libres

      223 --- E O F --- 2008-07-11 15:07:19
      0
  4. Utilisateur anonyme
     
    combofix a fait un super menage ....

    Comment va le pc ??

    refais un scan hijackthis et post le rapport stp
    0
    1. Pilou_le_picard Messages postés 413 Statut Membre 31
       
      Voilà le rapport de Hijackthis après le ménage de ComboFix ^^


      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\windows\system\hpsysdrv.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
      C:\WINDOWS\ALCXMNTR.EXE
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
      C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\explorer.exe
      C:\WINDOWS\system32\notepad.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\DOCUME~1\Johan\LOCALS~1\Temp\Répertoire temporaire 1 pour HiJackThis.zip\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
      O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
      O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Utilisateur anonyme
     
    réouvre hijackthis
    fais scan only
    coches ces lignes :

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab

    tu les coches et tu clic sur fix checked

    ensuite désinstal java car pas a jours et telecharge et instal cette version :

    https://www.java.com/fr/download/manual.jsp

    internet explorer n est pas a jours (faille de sécurité) telecharge et instal la version 7 :

    https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

    a lire : http://forum.malekal.com/ftopic3452.php

    ensuite :

    regarde ceci concernant avast :

    antivir vs avast :

    -> http://forum.malekal.com/ftopic3528.php

    alors je te conseille de le desinstaller et d´installer antivir a la place

    Telecharge et instales l'antivirus Antivir Personal Edition Classic :

    ->https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/13198.html

    tuto : http://www.swl1f.net/viewtopic.php?f=14&t=59

    Pour désinstaller Avast telecharge cet outil

    https://www.avast.com/fr-fr/uninstall-utility

    ensuite tu n as pas de parefeu :

    pare-feu gratuits

    télécharger la version gratuite de Zone alarm
    https://www.pcastuces.com/logitheque/zonealarm.htm
    TUTO
    http://securite-facile.ovh.org/zonealarm.php
    http://forum.telecharger.01net.com/forum/

    ou

    télécharger la version gratuite de Kerio
    Kerio (parefeu)
    https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
    TUTO
    https://kerio.probb.fr/
    SITE de Kerio
    https://kerio.probb.fr/

    ou

    ComodoFirewallPro 2.4 téléchargement
    http://www.personalfirewall.comodo.com/
    Tuto pour la 2.4
    https://infomars.fr/forum/index.php?s=908072e48ff7cf0359366440cb26c93f&showtopic=389
    Tuto pour la 2.4
    http://www.nordicnature.net/tutorials/comodo/cf24wiz.htm
    Attention la 3.0 est en anglais uniquement et est plus difficile a paramétrer
    Tuto pour la 3.0
    https://infomars.fr/forum/index.php?showtopic=1225

    ou

    OnlineArmor :
    téléchargement:https://www.commentcamarche.net/telecharger/ 34055356 online armor personal firewall

    tutoriels:https://forum.pcastuces.com/sujet.asp?f=25&s=35606
    :https://www.malekal.com/tutorial-online-armor-free/

    A lire :

    https://www.commentcamarche.net/contents/992-firewall-pare-feu

    ensuite :

    -> Télécharge Ccleaner (n'installe pas la barre d'outil Yahoo):

    https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

    -> L´installer.

    -> Une fois installé et lancé :

    Dans la colonne de gauche, click sur :

    ->"registre" :

    Coches toutes les cases sous"l´integrité du registre", puis click en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs", tu auras un message pour sauvegarder ta base de registre, tu click "oui" puis tu recommence jusqu'à ce qu'il ne trouve plus rien.

    ps : les sauvegardes que tu auras faites, pourront etre supprimées ulterieurement si tout va bien.

    ->"nettoyeur"

    quitte ton navigateur avant de le lancer, dans les propriétés du nettoyeur de l´onglet "windows" et "applications"décoche la derniere case (Avancé si elle est cochée) puis click sur "lancer le nettoyage" qunand il aura terminé le scan click en bas a droite sur "lancer le nettoyage" et accepte par oui.

    -> Tutoriel en image :

    https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

    ensuite :

    telecharge et instal regcleaner:

    http://www.01net.com/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/4894.html

    tutorial :

    https://forums.cnetfrance.fr

    http://www.softastuces.com/tuto/maint/regcleaner/

    ensuite :

    Télecharge et instal AVG anti spyware:

    http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware

    instal le et met le a jours

    ensuite lance le scan et supprime

    puis poste le rapport sur le forum stp

    et pour finir :

    * pour supprimer les outils/fix utilisés :

    Télécharge ToolsCleaner sur ton bureau.
    -->
    http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

    # Clique sur Recherche et laisse le scan agir ...
    # Clique sur Suppression pour finaliser.
    # Tu peux, si tu le souhaites, te servir des Options facultatives.
    # Clique sur Quitter pour obtenir le rapport.
    # Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    et :

    Clic sur "démarrer", cliques droit sur "poste de travail", "propriétés", onglet "restauration du système"

    ¤ coche la case "désactiver la Restauration du systéme sur tous les lecteurs", puis clic sur "appliquer"
    ¤ décoche la case et clic sur "appliquer" puis "ok".

    Maintenant, que l'ont à effacés les point infectés, nous allons créer un point propre:

    Clic sur "démarrer", "tous les programmes", "accessoires", "outils système", "restauration du système", choisis "créer un point de restauration" nommes le " ccm" par exemple, cliques sur "créer" puis "ok".
    Voilà, maintenant le point de restauration est créé. Si un jour tu décides tu pourras revenir en arrière à la date créée.

    0

Discussions similaires

Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport
Utilisateur anonyme -
TomH. -

13 réponses
impossible d'afficher le tableau dynamique sur un rapport existant
Pierre -
Adrien71 -

3 réponses
Theme de rapport de stage option comptabilité
sana saydou -
Raymond PENTIER -

2 réponses
Problém affichage du tableau croisé dynamique
BK -
Raymond PENTIER -

2 réponses
Rapport audit parc informatique
It administrateur -
alpha -

9 réponses