Ai-je un virus

nicedydy -  
varfendell Messages postés 3259 Date d'inscription   Statut Membre Dernière intervention   -
Bonjour,
voilà j'voudrais savoir si il ya un virus la dedans et que dois-je faire après?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:45:04, on 14/08/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Packard Bell\FIJI\ABoard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Packard Bell\FIJI\AOSD.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Program Files\Packard Bell\FIJI\aboard.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User '?')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User '?')
O4 - HKUS\S-1-5-21-1611776033-2431476216-3443469443-1004\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (User '?')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - (no file)
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} -
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe
End of file - 7532 bytes
A voir également:

2 réponses

varfendell Messages postés 3259 Date d'inscription   Statut Membre Dernière intervention   707
 
Bonjour,

Apres analyse, je n'ai rien trouvé.

Si tu veut, pour plus de sureter, tu peut toujours faire un scan avec malware:
télécharge malware sur cette page=>le tutoriel à été fait par VIRUS_KILLER

A la fin de l'installation, veille à ce que l'option Mettre à jour Malwarebytes' Anti-Malware soit cochée. >>> clique sur "Terminer"
Lance Malwarebyte's Anti-Malware en double-cliquant sur l'icône sur le bureau.
Au premier lancement, une fenêtre t'annonce que la version est Free >>> clique sur ok

Laisse les Mises à jour se télécharger
*** Referme le programme ***

Lance Malwarebyte's Anti-Malware
Onglet "Recherche" >>> coche Exécuter un examen complet >>> Rechercher
Sélectionne ton disque dur >>> clic sur Lancer l'examen
Suppression des éléments détectés >>>> clique sur Supprimer la sélection
Colle le rapport de malwarebytes dans ta réponse
S'il t'es demandé de redémarrer >>> clique sur "Yes"

Voila, sinon un petit coup de ccleaner ne fera jamais de mal à ton ordi ^^'

0
nicedydy
 
voici le rapport


Malwarebytes' Anti-Malware 1.24
Version de la base de données: 1056
Windows 6.0.6001 Service Pack 1

13:05:33 16/08/2008
mbam-log-8-16-2008 (13-05-26).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 149025
Temps écoulé: 1 hour(s), 3 minute(s), 9 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 7
Fichier(s) infecté(s): 38

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\CCleaner (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Kaspersky Anti-Virus 2009 (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Malwarebytes' Anti-Malware (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Spybot - Search & Destroy (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008 (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities (Rogue.XLG) -> No action taken.

Fichier(s) infecté(s):
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\CCleaner\CCleaner Homepage.url (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\CCleaner\CCleaner.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\CCleaner\Uninstall CCleaner.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Kaspersky Anti-Virus 2009\Aide de Kaspersky Anti-Virus 2009.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Kaspersky Anti-Virus 2009\Contrat de licence.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Kaspersky Anti-Virus 2009\Kaspersky Anti-Virus 2009.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Kaspersky Anti-Virus 2009\Kaspersky Lab en ligne.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Kaspersky Anti-Virus 2009\Modification, réparation ou suppression.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Malwarebytes' Anti-Malware\Désinstaller Malwarebytes' Anti-Malware.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Spybot - Search & Destroy\File Shredder.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Spybot - Search & Destroy\Spybot - Search & Destroy.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Spybot - Search & Destroy\Tutorial.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Spybot - Search & Destroy\Uninstall Spybot-S&D.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\Spybot - Search & Destroy\Update Spybot-S&D.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Aide de TuneUp Utilities 2008.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Site Web de TuneUp Software.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\TuneUp Utilities 2008.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Disk Doctor.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Disk Space Explorer.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Drive Defrag.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Maintenance en 1 clic.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Process Manager.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Registry Cleaner.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Registry Defrag.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Registry Editor.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Repair Wizard.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Rescue Center.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Shredder.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp StartUp Manager.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Styler 2.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp System Control.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp System Information.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp System Optimizer.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Undelete.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Uninstall Manager.lnk (Rogue.XLG) -> No action taken.
C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Protection\TuneUp Utilities 2008\Utilities\TuneUp Update Wizard.lnk (Rogue.XLG) -> No action taken.

pourquoi dit t'il dangereux mes protection?
0
varfendell Messages postés 3259 Date d'inscription   Statut Membre Dernière intervention   707
 
Bien, comme tu peut le voir sur ton rapport, de nombreuse infections ont été trouvées, mais pas supprimé.

Refait la même chose mais avec démarrer en mode sans échec

repost le rapport malware
0