Pub ANTIVIRUS 2009 - Page 2

Résolu
Précédent
  • 1
  • 2
ockland Messages postés 120 Statut Membre 82
 
;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-08-13 22:51:06
PROTECTIONS: 1
MALWARE: 30
SUSPECTS: 7
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Windows Defender 1.1.3806.0 No No
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.doubleclick.net/]
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@doubleclick[1].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@doubleclick[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@atdmt[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@atdmt[3].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.atdmt.com/]
00139535 Application/Processor HackTools No 0 Yes No C:\Users\Betty\Downloads\SmitfraudFix\Process.exe
00139535 Application/Processor HackTools No 0 Yes No C:\Program Files\Mozilla Firefox\SmitfraudFix\Process.exe
00139535 Application/Processor HackTools No 0 Yes No C:\Windows\System32\Process.exe
00139535 Application/Processor HackTools No 0 No No C:\Users\Betty\Downloads\SmitfraudFix.exe[C:\Users\Betty\Downloads\SmitfraudFix.exe][SmitfraudFix\Process.exe]
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.tradedoubler.com/]
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.tradedoubler.com/]
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.tradedoubler.com/]
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@tradedoubler[2].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.tradedoubler.com/]
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.tradedoubler.com/]
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@tradedoubler[3].txt
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.247realmedia.com/]
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.247realmedia.com/]
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.fastclick.net/]
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.fastclick.net/]
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.fastclick.net/]
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@mediaplex[1].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.mediaplex.com/]
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.xiti.com/]
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[ad.yieldmanager.com/]
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[ad.yieldmanager.com/]
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[ad.yieldmanager.com/]
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[ad.yieldmanager.com/]
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@apmebf[1].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.apmebf.com/]
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@weborama[1].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@weborama[2].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.weborama.fr/]
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.weborama.fr/]
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.weborama.fr/]
00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.adtech.de/]
00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[fl01.ct2.comclick.com/]
00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[fl01.ct2.comclick.com/]
00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[fl01.ct2.comclick.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@advertising[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@advertising[3].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.advertising.com/]
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.overture.com/]
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.overture.com/]
00172449 Cookie/MetriWeb TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.metriweb.be/]
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@bluestreak[1].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@bluestreak[2].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.bluestreak.com/]
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.adrevolver.com/]
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.adrevolver.com/]
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.adrevolver.com/]
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.adrevolver.com/]
00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.adviva.net/]
00254333 Trj/Dropper.RB Virus/Trojan No 0 Yes Yes L:\Telechargement lime wire\PROGRAMMES\CDRWIN\cdrwin6.exe
00271993 W32/Puce.E.worm Virus/Worm No 1 Yes Yes C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\studio-scrap-[-full---crack---serial-].zip[Setup.exe]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Microsoft\Windows\Cookies\betty@smartadserver[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\Betty\AppData\Roaming\Mozilla\Firefox\Profiles\zq3mz36o.default\cookies.txt[.smartadserver.com/]
02080235 Generic Malware Virus/Trojan No 0 Yes Yes C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\studio-scrap-[-full---crack---serial-].zip[ ------ CASINO - POKER on-line.exe]
02197130 Trj/Rebooter.J Virus/Trojan No 1 Yes No C:\Users\Betty\Downloads\SmitfraudFix\Reboot.exe
02197130 Trj/Rebooter.J Virus/Trojan No 1 No No C:\Users\Betty\Downloads\SmitfraudFix.exe[C:\Users\Betty\Downloads\SmitfraudFix.exe][SmitfraudFix\Reboot.exe]
02197130 Trj/Rebooter.J Virus/Trojan No 1 Yes No C:\Program Files\Mozilla Firefox\SmitfraudFix\Reboot.exe
02885963 Rootkit/Booto.C Virus/Worm No 0 Yes Yes C:\Users\Betty\AppData\Local\Temp\perflib_perfdata__755
03074964 Trj/CI.A Virus/Trojan No 0 Yes Yes C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\EMPORiO Files\Six_Steam.zip[Six_Steam/SiX.exe]
03445477 Adware/MalwareAlarm Adware No 1 No No C:\Users\Betty\Downloads\SmitfraudFix.exe[C:\Users\Betty\Downloads\SmitfraudFix.exe][SmitfraudFix\IEDFix.exe]
03445477 Adware/MalwareAlarm Adware No 1 Yes No C:\Users\Betty\Downloads\SmitfraudFix\IEDFix.exe
03445477 Adware/MalwareAlarm Adware No 1 Yes No C:\Windows\System32\IEDFix.exe
03445477 Adware/MalwareAlarm Adware No 1 Yes No C:\Program Files\Mozilla Firefox\SmitfraudFix\IEDFix.exe
03469799 Spyware/Virtumonde Spyware No 1 Yes No C:\Windows\System32\eehabe.dll
03469799 Spyware/Virtumonde Spyware No 1 Yes No C:\Windows\System32\fpargiov.dll
03476330 Trj/Agent.JPO Virus/Trojan No 0 Yes No C:\Windows\System32\tdsslog.dll
03477235 Application/SmithFraudFix.A HackTools No 0 Yes No C:\Users\Betty\Downloads\SmitfraudFix.exe
;===================================================================================================================================================================================
SUSPECTS
Sent Location �����+s5
;===================================================================================================================================================================================
Yes C:\hp\bin\KillIt.exe �����+s5
Yes C:\Program Files\GameHouse Games Collection\Atlantis\Atlantis.exe �����+s5
Yes C:\Program Files\GameHouse Games Collection\Big Kahuna Reef\Big Kahuna Reef.exe �����+s5
Yes C:\Program Files\GameHouse Games Collection\Collapse! Crunch\Collapse3.exe �����+s5
Yes C:\Program Files\GameHouse Games Collection\Ricochet Lost Worlds - Recharged\RicochetRecharged.exe �����+s5
Yes C:\_OTMoveIt\MovedFiles\08022008_231700\Windows\wnslvxtf.dll �����+s5
Yes L:\TELECHARGEMENT\Bookworm Key Generator\bookworm.deluxe.1.0.keygen-tsrh.exe �����+s5
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description �����+s5
;===================================================================================================================================================================================
;===================================================================================================================================================================================

Voilà, plus de soucis avec antivirus 2009 mais maintenant j'en ai un autre !!!!
lol

Voici le topic si tu as des solutions je prends, en tout cas merci beaucoup

http://www.commentcamarche.net/forum/affich 7881661 probleme d affichage icone et fond d ecran#dernier
0
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
 
fais le menage dans tes cacks!

_____________

télécharge OTMoveIt
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. Ou sur https://www.luanagames.com/index.fr.html
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

Citation :

L:\Telechargement lime wire\PROGRAMMES\CDRWIN\cdrwin6.exe
C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\studio-scrap-[-full---crack---serial-].zip
C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\studio-scrap-[-full---crack---serial-].zip
C:\Program Files\Mozilla Firefox\SmitfraudFix\Reboot.exe
C:\Users\Betty\AppData\Local\Temp\perflib_perfdata__755
C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\EMPORiO Files\Six_Steam.zip
C:\Windows\System32\eehabe.dll
C:\Windows\System32\fpargiov.dll
C:\Windows\System32\tdsslog.dll

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

________________________

colle un rapport hijackthis
https://www.01net.com/404/­re/fiches/29061.html

manuel :

http://leblogdeclaude.blogspot.com/2006/10/informatique-sect­ion-hijackthis.html

Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

Ensuite avec Explorer créer un dossier c:\hijackthis
Décompresser Hijackthis dans ce dossier.
C'est important pour les sauvegardes."
0
ockland Messages postés 120 Statut Membre 82
 
File/Folder L:\Telechargement lime wire\PROGRAMMES\CDRWIN\cdrwin6.exe not found.
< C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\studio-scrap-[-full---crack---serial-].zip >
C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\studio-scrap-[-full---crack---serial-].zip moved successfully.
< C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\studio-scrap-[-full---crack---serial-].zip >
File/Folder C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\studio-scrap-[-full---crack---serial-].zip not found.
File move failed. C:\Program Files\Mozilla Firefox\SmitfraudFix\Reboot.exe scheduled to be moved on reboot.
File/Folder C:\Users\Betty\AppData\Local\Temp\perflib_perfdata__755 not found.
C:\Users\Betty\Downloads\eMule\Incoming\déja transfere au 05 08 08\EMPORiO Files\Six_Steam.zip moved successfully.
DllUnregisterServer procedure not found in C:\Windows\System32\eehabe.dll
C:\Windows\System32\eehabe.dll NOT unregistered.
File move failed. C:\Windows\System32\eehabe.dll scheduled to be moved on reboot.
DllUnregisterServer procedure not found in C:\Windows\System32\fpargiov.dll
C:\Windows\System32\fpargiov.dll NOT unregistered.
C:\Windows\System32\fpargiov.dll moved successfully.
File/Folder C:\Windows\System32\tdsslog.dll not found.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 08142008_134824
0
ockland Messages postés 120 Statut Membre 82
 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:04:12, on 14/08/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16681)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\AOL\1180709464\ee\aolsoftware.exe
C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\ExtraFilm FotoFacil\Agent.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\AOL 9.0 VR\waol.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\AOL 9.0 VR\shellmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\System32\mobsync.exe
C:\hp\kbd\kbd.exe
C:\Windows\system32\WerCon.exe
C:\hijackthis\HiJackThis(2).exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\Windows\system32\PSDrvCheck.exe
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1180709464\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [HerculesCamService] C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
O4 - HKLM\..\Run: [CCUTRAYICON] FactoryMode
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [LiveUpdate] "\Update\Copyer.exe" -R
O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program Files\ExtraFilm FotoFacil\Agent.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [LaunchList] C:\Program Files\Pinnacle\Studio 11\LaunchList2.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0 VR\AOL.EXE" -b
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O13 - Gopher Prefix:
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
O23 - Service: Google Desktop Manager 5.7.801.1629 (GoogleDesktopManager-010108-205858) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel DH Service (IntelDHSvcConf) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe
O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\Windows\system32\drivers\pclepci.sys
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\Windows\wanmpsvc.exe
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
 
vire ce qui est dans moved files en allant dans poste de travail puis C puis otmovit

________________

Télécharge RavAntivirus d'Evosla :
http://ww25.evosla.com/compteur.php?soft=rav_antivirus

# Si tu as une clé USB, disque dur externe, etc, branche-les sans les ouvrir avant de lancer ce FIX
# Fais un clic droit sur le fichier .ZIP > Extraire sur > le Bureau
# Doucle-clique sur >> RAV.exe << afin de lancer l'outil.
# Une fois RAV ANTIVIRUS lancé, laisse-le réagir , il scanne automatiquement tout les lecteurs (disques fixes et amovibles)
# Si infection > un log s'établira, sinon le soft affichera (très rapide) ==>Votre Ordinateur est sain .
# Retire tes disques amovibles et redémarrez votre ordinateur.
# Poste le rapport, si infection!
_______________

pour désactiver le compte utilisateur:
https://www.baudelet.net/windows-vista/uac-controle-comptes-utilisateurs.htm

désactive le compte utilisateur et tes protections puis:

Télécharge Combofix de sUBs : aide ici : https://forum.pcastuces.com/sujet.asp?f=25&s=37315

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Sauvegarde le sur ton bureau et pas ailleurs !

Aide à l’utilisation de combofix ici: https://bibou0007.forumpro.fr/login?redirect=%2Ft121-topic

Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider.
Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.
0
ockland Messages postés 120 Statut Membre 82
 
j'ai du reformater le disque dur mais merci beaucoup jlpjlp
0
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
 
ok

pour protéger gratos ton ordi

https://www.commentcamarche.net/telecharger/ 4 securite

mettre un antivirus

AVAST en français ou ANTIVIR (en anglais mais très efficace)
https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
-------------
des anti-espions :
MALWAREBYTE'S ANTIMALWARE + SPYBOT
+
SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

Rq : spybot et ad-aware on sorti de nouvelles versions cette année vérifiez que vous avez la dernière version
--------
un pare feu :
celui de Windows ou mieux COMODO ou KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)

https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
https://manuelsdaide.com/contact/
http://www.open-files.com/forum/index.php?showtopic=29277
https://www.commentcamarche.net/telecharger/ 157 zonealarm

-----------

CCLEANER pour effacer les traces de surf
----------

naviguer avec firefox ou opera ou safari et non internet explorer plus touché par les virus
0
Précédent
  • 1
  • 2