Sos j'ai un virus

viasnake Messages postés 179 Statut Membre -  
 anis69 -
Bonjour,
j'ai un virus qui s'appelle spider h il cantrol tous qui concerne le font d'écran quelqu'un peut me dire comment je fait pour le supprimer
Configuration: Windows XP
Firefox 3.0.1

6 réponses

  1.
    plm69 Messages postés 532 Statut Membre 17
     
    Télécharge combofix.exe (par sUBs) sur ton Bureau.

    -> http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    -> Double clique combofix.exe.
    -> Tape sur la touche 1 (Yes) pour démarrer le scan.
    -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    Avant d'utiliser ComboFix :

    -> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

    -> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

    Une fois fait, sur ton bureau double-clic sur Combofix.exe.

    - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

    /!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

    - En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

    - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

    -> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

    -> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

    -> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

    et

    Télécharge HijackThis ici :

    -> https://www.commentcamarche.net/telecharger/ 159 hijackthis

    Tutoriel d´instalation : (Merci a Balltrap34 pour cette réalisation)

    -> http://pageperso.aol.fr/balltrap34/Hijenr.gif

    Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

    -> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

    Post le rapport généré ici stp...
    0
    1. anis69
       
      Voici mon rapport :
      ComboFix 08-12-31.01 - Administrateur 2009-01-02 2:30:31.1 - NTFSx86
      Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.255.24 [GMT 1:00]
      Running from: c:\documents and settings\Administrateur\Bureau\ComboFix.exe
      * Created a new restore point

      [COLOR=RED][B]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/B][/COLOR]
      .

      ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
      .

      c:\documents and settings\Administrateur\Local Settings\Application Data\lzkzcov.dat
      c:\documents and settings\Administrateur\Local Settings\Application Data\lzkzcov_nav.dat
      c:\documents and settings\Administrateur\Local Settings\Application Data\lzkzcov_navps.dat
      c:\program files\webmediaplayer
      c:\windows\autorun.inf
      c:\windows\svchost.exe
      c:\windows\system32\a.exe
      c:\windows\system32\nvs2.inf
      c:\windows\system32\temp1.exe
      c:\windows\system32\temp2.exe
      c:\windows\xcopy.exe

      .
      ((((((((((((((((((((((((( Files Created from 2008-12-02 to 2009-01-02 )))))))))))))))))))))))))))))))
      .

      2009-01-02 01:37 . 2004-08-19 22:09 366,592 --a--c--- c:\windows\system32\DllCache\w3svc.dll
      2009-01-02 01:37 . 2004-08-19 22:09 77,824 --a--c--- c:\windows\system32\DllCache\wam51.dll
      2009-01-02 01:37 . 2002-09-07 02:00 74,240 --a--c--- c:\windows\system32\DllCache\w3ext.dll
      2009-01-02 01:37 . 2004-08-19 22:09 53,248 --a--c--- c:\windows\system32\DllCache\wamreg51.dll
      2009-01-02 01:37 . 2002-09-07 02:00 48,256 --a--c--- c:\windows\system32\DllCache\w32.dll
      2009-01-02 01:37 . 2002-09-07 02:00 41,600 --a--c--- c:\windows\system32\DllCache\weitekp9.dll
      2009-01-02 01:37 . 2002-09-07 02:00 35,840 --a--c--- c:\windows\system32\DllCache\winchat.exe
      2009-01-02 01:37 . 2002-09-07 02:00 31,360 --a--c--- c:\windows\system32\DllCache\weitekp9.sys
      2009-01-02 01:37 . 2002-09-07 02:00 28,288 --a--c--- c:\windows\system32\DllCache\xjis.nls
      2009-01-02 01:37 . 2002-09-07 02:00 9,216 --a--c--- c:\windows\system32\DllCache\wamps51.dll
      2009-01-02 01:37 . 2002-09-07 02:00 5,632 --a--c--- c:\windows\system32\DllCache\w3svapi.dll
      2009-01-02 01:37 . 2002-09-07 02:00 4,608 --a--c--- c:\windows\system32\DllCache\w3ctrs51.dll
      2009-01-02 01:35 . 2004-08-19 22:09 563,712 --a--c--- c:\windows\system32\DllCache\fxsst.dll
      2009-01-02 01:34 . 2004-08-19 22:09 548,352 --a--c--- c:\windows\system32\DllCache\dialer.exe
      2009-01-02 01:33 . 2004-05-13 00:39 876,653 --a--c--- c:\windows\system32\DllCache\fp4awel.dll
      2009-01-02 01:31 . 2009-01-02 01:31 749 -rah----- c:\windows\WindowsShell.Manifest
      2009-01-02 01:31 . 2009-01-02 01:31 749 -rah----- c:\windows\system32\wuaucpl.cpl.manifest
      2009-01-02 01:31 . 2009-01-02 01:31 749 -rah----- c:\windows\system32\sapi.cpl.manifest
      2009-01-02 01:31 . 2009-01-02 01:31 749 -rah----- c:\windows\system32\nwc.cpl.manifest
      2009-01-02 01:31 . 2009-01-02 01:31 749 -rah----- c:\windows\system32\ncpa.cpl.manifest
      2009-01-02 01:31 . 2009-01-02 01:31 488 -rah----- c:\windows\system32\logonui.exe.manifest
      2009-01-02 01:30 . 2002-09-07 02:00 16,384 --a--c--- c:\windows\system32\DllCache\isignup.exe
      2009-01-02 01:24 . 2004-08-03 22:31 20,992 --a------ c:\windows\system32\drivers\RTL8139.sys
      2009-01-02 01:15 . 2002-09-07 02:00 24,661 --a------ c:\windows\system32\spxcoins.dll
      2009-01-02 01:15 . 2002-09-07 02:00 24,661 --a--c--- c:\windows\system32\DllCache\spxcoins.dll
      2009-01-02 01:15 . 2002-09-07 02:00 13,312 --a------ c:\windows\system32\irclass.dll
      2009-01-02 01:15 . 2002-09-07 02:00 13,312 --a--c--- c:\windows\system32\DllCache\irclass.dll
      2009-01-02 01:02 . 2002-09-07 02:00 13,107,200 --a------ c:\windows\system32\oembios.bin
      2008-12-21 19:11 . 2008-12-21 19:11 1,440,054 --a------ c:\windows\system32\SpiderH.bmp
      2008-12-21 19:11 . 2008-04-28 00:25 337,417 --ahs---- c:\windows\system32\SpiderH.vbs
      2008-12-21 19:11 . 2008-12-21 19:11 80,960 --a------ c:\windows\system32\SpiderH.jpg
      2008-12-21 19:11 . 2008-12-21 19:11 28,672 --a------ c:\windows\system32\ncmd.exe
      2008-12-12 13:23 . 2008-12-12 13:23 <REP> d-------- c:\program files\Intuwave Ltd
      2008-12-12 13:23 . 2008-12-12 13:24 <REP> d-------- c:\documents and settings\All Users\Application Data\Sony Ericsson
      2008-12-12 13:23 . 2004-09-20 13:09 344,064 --a------ c:\windows\system32\ecsepm.cpl
      2008-12-12 13:22 . 2008-12-12 13:24 <REP> d-------- c:\program files\Sony Ericsson
      2008-12-07 16:42 . 2007-02-09 05:30 1,079,808 -ra------ c:\windows\system32\mfc80u.dll
      2008-12-07 16:42 . 2007-02-09 05:30 626,688 -ra------ c:\windows\system32\msvcr80.dll
      2008-12-07 16:42 . 2007-02-09 05:30 548,864 -ra------ c:\windows\system32\msvcp80.dll
      2008-12-07 16:42 . 2007-02-09 05:30 95,744 -ra------ c:\windows\system32\atl80.dll
      2008-12-07 16:39 . 2009-01-02 01:58 <REP> d-------- c:\documents and settings\All Users\Application Data\Apple Computer
      2008-12-07 16:37 . 2008-12-07 16:37 <REP> d-------- c:\program files\OLYMPUS

      .
      (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2009-01-02 01:37 --------- d-----w c:\program files\DNA
      2009-01-02 01:37 --------- d-----w c:\documents and settings\Administrateur\Application Data\DNA
      2009-01-02 01:01 --------- d-----w c:\program files\TvAnts
      2009-01-02 00:56 --------- d-----w c:\program files\OpenOffice.org 2.4
      2009-01-02 00:53 --------- d-----w c:\program files\Nokia
      2009-01-02 00:48 --------- d-----w c:\program files\Fichiers communs\muvee Technologies
      2009-01-01 23:37 --------- d-----w c:\program files\LimeWire
      2009-01-01 23:35 --------- d-----w c:\program files\BitTorrent
      2009-01-01 23:35 --------- d-----w c:\documents and settings\Administrateur\Application Data\BitTorrent
      2008-12-29 13:04 --------- d-----w c:\documents and settings\Administrateur\Application Data\LimeWire
      2008-12-28 14:59 --------- d-----w c:\documents and settings\Administrateur\Application Data\OpenOffice.org2
      2008-12-16 17:02 --------- d-----w c:\program files\DivX
      2008-12-12 12:23 --------- d--h--w c:\program files\InstallShield Installation Information
      2008-12-11 01:17 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
      2008-11-26 22:01 --------- d-----w c:\program files\VideoLAN
      2008-11-06 15:41 --------- d-----w c:\documents and settings\All Users\Application Data\NOS
      2008-11-06 15:40 --------- d-----w c:\program files\NOS
      2008-11-04 21:50 --------- d-----w c:\documents and settings\Administrateur\Application Data\Nseries
      2008-06-30 20:17 1,234 ----a-w c:\documents and settings\Administrateur\Application Data\filterclsid.dat
      2008-04-04 14:24 696 ----a-w c:\documents and settings\Administrateur\Application Data\waver_2.95.dat
      2008-03-09 21:22 18,856 ----a-w c:\documents and settings\Administrateur\Application Data\GDIPFONTCACHEV1.DAT
      2008-02-21 11:51 267,592 ----a-w c:\program files\Uninstall Ask Toolbar.dll
      2008-04-27 23:25 337,417 --sha-w c:\windows\system32\SpiderH.vbs
      .

      ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* empty entries & legit default entries are not shown
      REGEDIT4

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
      "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-19 68856]
      "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-19 15360]
      "BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2008-12-16 342848]
      "OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2008-11-07 95536]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2005-09-16 274432]
      "ZSSnp211"="c:\windows\ZSSnp211.exe" [2006-08-19 49152]
      "Domino"="c:\windows\Domino.exe" [2006-08-18 49152]
      "SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
      "PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2007-01-29 30248]
      "IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2007-01-29 46632]
      "PPort11reminder"="c:\program files\ScanSoft\PaperPort\Ereg\Ereg.exe" [2007-02-01 255528]
      "BrMfcWnd"="c:\program files\Brother\Brmfcmon\BrMfcWnd.exe" [2007-03-12 663552]
      "ControlCenter3"="c:\program files\Brother\ControlCenter3\brctrcen.exe" [2007-01-26 65536]
      "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
      "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
      "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-10-06 185872]
      "OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" [2008-11-07 54576]
      "SpiderH"="c:\windows\system32\SpiderH.vbs" [2008-04-28 337417]
      "AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 c:\windows\ALCXMNTR.EXE]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
      "ClearDocsOnExit"= 64 (0x40)
      "NoSMHelp"= 1 (0x1)
      "MemCheckBoxInRunDlg"= 1 (0x1)
      "NoSMBalloonTip"= 1 (0x1)
      "NoWelcomeScreen"= 1 (0x1)
      "NoAutoUpdate"= 1 (0x1)

      [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
      "ClearDocsOnExit"= 64 (0x40)
      "NoSMHelp"= 1 (0x1)
      "MemCheckBoxInRunDlg"= 1 (0x1)
      "NoSMBalloonTip"= 1 (0x1)
      "NoWelcomeScreen"= 1 (0x1)
      "NoAutoUpdate"= 1 (0x1)

      [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
      "{88485281-8b4b-4f8d-9ede-82e29a064277}"= "c:\progra~1\MarkAny\ContentSafer\MACSMANAGER.dll" [2004-11-23 192512]

      [HKEY_LOCAL_MACHINE\software\microsoft\security center]
      "AntiVirusOverride"=dword:00000001
      "FirewallOverride"=dword:00000001
      "UpdatesDisableNotify"=dword:00000001

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
      "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
      "c:\\WINDOWS\\system32\\muzapp.exe"=
      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
      "%windir%\\system32\\sessmgr.exe"=
      "c:\\Program Files\\DNA\\btdna.exe"=
      "c:\\Program Files\\Intuwave Ltd\\Shared\\mRouterRunTime\\mRouterRuntime.exe"=
      "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
      "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
      "1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
      "1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
      "500:UDP"= 500:UDP:@xpsp2res.dll,-22017

      S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2008-11-06 33752]
      S3 Navcar;Navman In-car Navigator USB Driver Service;c:\windows\system32\DRIVERS\Navcar.sys [2008-02-10 30329]
      S3 qcusbmdm;Qualcomm Proprietary USB Driver (PID 3197);c:\windows\system32\DRIVERS\qcusbmdm.sys [2008-04-24 59632]
      S3 qcusbser;Qualcomm Diagnostic Port 3197;c:\windows\system32\DRIVERS\qcusbser.sys [2008-04-24 59632]
      S3 s816bus;Sony Ericsson Device 816 driver (WDM);c:\windows\system32\DRIVERS\s816bus.sys [2008-10-03 81832]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6061b2d4-57d0-11dd-b383-000c76870b3b}]
      \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b6a94fee-cf8a-11dd-b4dc-000c76870b3b}]
      \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wallpaper.vbs
      \Shell\Explore\Command - Wscript \Wallpaper.vbs
      \Shell\Open\Command - Wscript \Wallpaper.vbs

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c515ca50-58a2-11dd-b385-000c76870b3b}]
      \Shell\AutoRun\command - qa8sywva.cmd
      \Shell\explore\Command - qa8sywva.cmd
      \Shell\open\Command - qa8sywva.cmd

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dd2a2e80-a9ca-11dd-b459-000c76870b3b}]
      \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wallpaper.vbs
      \Shell\Explore\Command - Wscript \Wallpaper.vbs
      \Shell\Open\Command - Wscript \Wallpaper.vbs

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ea67142b-2b05-11dd-b2e1-000c76870b3b}]
      \Shell\Auto\command - wscript "esta ig.vbs"
      \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript "esta ig.vbs"

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fa1e8374-98eb-11dc-b09c-000c76870b3b}]
      \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fdb4db7a-c476-11dd-b4b6-000c76870b3b}]
      \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wallpaper.vbs
      \Shell\Explore\Command - Wscript \Wallpaper.vbs
      \Shell\Open\Command - Wscript \Wallpaper.vbs
      .
      - - - - ORPHANS REMOVED - - - -

      HKLM-Run-FLMOFFICE4DMOUSE - c:\program files\Labtec\Desktop\V5.1\moffice.exe
      HKLM-Run-OFFICEKB - c:\program files\Labtec\Desktop\V5.1\kbdap32a.exe


      .
      ------- Supplementary Scan -------
      .
      uStart Page = hxxp://www.google.fr/
      uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
      uInternet Connection Wizard,ShellNext = iexplore
      uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
      IE: E&xporter vers Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
      FF - ProfilePath - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ofi6exle.default\
      FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
      FF - prefs.js: browser.search.selectedEngine - Yahoo
      FF - prefs.js: browser.startup.homepage - hxxp://fr.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
      FF - prefs.js: keyword.URL - http //fr.search.yahoo.com/search?ei=utf-8&fr=megaup&p=
      FF - plugin: c:\program files\Mozilla Firefox\plugins\npclntax_ZangoSA.dll
      .

      **************************************************************************

      catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2009-01-02 02:36:56
      Windows 5.1.2600 Service Pack 2 NTFS

      scanning hidden processes ...

      scanning hidden autostart entries ...

      scanning hidden files ...

      scan completed successfully
      hidden files: 0

      **************************************************************************
      .
      --------------------- LOCKED REGISTRY KEYS ---------------------

      [HKEY_USERS\Administrator\Software\\¸ìÎ *NULL*QÇ©Æ *NULL*Õ\¸ø­¨· *NULL*ȹ•¼¬ÀÐÅÁ *NULL*ÝÀ1Á´ *NULL*QÇ©Æ *NULL*Õ\¸ø­¨·]
      @Security=(SE_DACL_PRESENT SE_SELF_RELATIVE (@Owner @Group @DACL)
      @Owner=Administrator
      @Allowed: (Full) (Administrator)
      @Allowed: (Full) (Administrator)
      @Allowed: (Full) (LocalSystem)
      @Allowed: (Full) (LocalSystem)
      @Allowed: (Full) (Administrators)
      @Allowed: (Full) (Administrators)
      @Allowed: (Read) (S-1-5-12)
      @Allowed: (Read) (S-1-5-12)

      [HKEY_USERS\Administrator\Software\\¸ìÎ *NULL*QÇ©Æ *NULL*Õ\¸ø­¨· *NULL*ȹ•¼¬ÀÐÅÁ *NULL*ÝÀ1Á´ *NULL*QÇ©Æ *NULL*Õ\¸ø­¨·\PC Sync]
      @Security="Inherited"

      [HKEY_USERS\Administrator\Software\\¸ìÎ *NULL*QÇ©Æ *NULL*Õ\¸ø­¨· *NULL*ȹ•¼¬ÀÐÅÁ *NULL*ÝÀ1Á´ *NULL*QÇ©Æ *NULL*Õ\¸ø­¨·\PC Sync\Settings]
      @Security="Inherited"
      .
      ------------------------ Other Running Processes ------------------------
      .
      c:\program files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      c:\program files\iPod\bin\iPodService.exe
      c:\windows\system32\wscript.exe
      c:\program files\Sony Ericsson\Mobile\audevicemgr.exe
      c:\progra~1\Sony Ericsson\Mobile\Connectivity Pack\ConnMngMntBox.exe
      c:\program files\Intuwave Ltd\Shared\mRouterRunTime\mRouterRuntime.exe
      .
      **************************************************************************
      .
      Completion time: 2009-01-02 2:40:27 - machine was rebooted
      ComboFix-quarantined-files.txt 2009-01-02 01:40:22

      Pre-Run: 59ÿ531ÿ321ÿ344 octets libres
      Post-Run: 61,253,365,760 octets libres

      242 --- E O F --- 2008-12-18 12:41:15
      0
  2. toptitbal Messages postés 5341 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 232
     
    Bonjour

    Télécharge le fichier d’installation d’Hijackthis en cliquant sur ce lien

    http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

    Enregistre HJTInstall.exe sur ton bureau.

    Double-clique sur HJTInstall.exe pour lancer le programme

    Tuto : https://www.androidworld.fr/

    Par défaut, il s'installera là :
    C:\Program Files\Trend Micro\HijackThis

    Accepte la license en cliquant sur le bouton "I Accept"
    Choisis l'option "Do a system scan and save a log file"

    Clique sur "Save log" pour enregistrer le rapport qui s'ouvrira avec le bloc-note

    Clique sur "Edition -> Sélectionner tout", puis sur "Edition -> Copier" pour copier tout le contenu du rapport

    Colle le rapport que tu viens de copier sur ce forum

    Ne fixe encore AUCUNE ligne, cela pourrait empêcher ton PC de fonctionner correctement
    0
    1. anis69
       
      Voici le rapport :
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 02:48:39, on 02/01/2009
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\WINDOWS\ZSSnp211.exe
      C:\WINDOWS\Domino.exe
      C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\WINDOWS\System32\WScript.exe
      C:\WINDOWS\ALCXMNTR.EXE
      C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\DNA\btdna.exe
      C:\Program Files\Sony Ericsson\Mobile\audevicemgr.exe
      C:\PROGRA~1\Sony Ericsson\Mobile\Connectivity Pack\ConnMngMntBox.exe
      c:\Program Files\Intuwave Ltd\Shared\mRouterRunTime\mRouterRuntime.exe
      C:\WINDOWS\explorer.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\SoftwareDistribution\Download\8d1470bed452b5d6aa1e9ba186868288\update\update.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe
      O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.exe
      O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
      O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
      O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
      O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
      O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
      O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
      O4 - HKLM\..\Run: [SpiderH] C:\WINDOWS\system32\SpiderH.vbs
      O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
      O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
      O4 - Global Startup: Phone Connection Monitor.lnk = ?
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\Office12\REFIEBAR.DLL
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
      O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe
      O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
      O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
      O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
      O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
      O24 - Desktop Component 0: (no name) - https://www.public.fr/Pop-Culture + OAS_url + 'adstream_nx.ads/' + OAS_sitepage + '/1' + OAS_rns + '@' + OAS_listpos + '!' + pos + OAS_query + '
      0
  3. viasnake Messages postés 179 Statut Membre 12
     
    ComboFix 08-08-18.05 - Administrateur 2008-08-21 21:18:17.1 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.254 [GMT 2:00]
    Endroit: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe
    * Création d'un nouveau point de restauration

    [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
    .

    ((((((((((((((((((((((((((((( Fichiers créés 2008-07-21 to 2008-08-21 ))))))))))))))))))))))))))))))))))))
    .

    2008-08-18 20:26 . 2008-08-18 20:26 <REP> d-------- C:\Program Files\AnalogX
    2008-08-18 17:10 . 2008-08-18 17:10 268 --ah----- C:\sqmdata06.sqm
    2008-08-18 17:10 . 2008-08-18 17:10 244 --ah----- C:\sqmnoopt06.sqm
    2008-08-18 00:53 . 2008-08-18 00:53 268 --ah----- C:\sqmdata05.sqm
    2008-08-18 00:53 . 2008-08-18 00:53 244 --ah----- C:\sqmnoopt05.sqm
    2008-08-17 23:41 . 2008-08-17 23:41 268 --ah----- C:\sqmdata04.sqm
    2008-08-17 23:41 . 2008-08-17 23:41 244 --ah----- C:\sqmnoopt04.sqm
    2008-08-17 22:34 . 2008-08-17 22:34 268 --ah----- C:\sqmdata03.sqm
    2008-08-17 22:34 . 2008-08-17 22:34 244 --ah----- C:\sqmnoopt03.sqm
    2008-08-17 22:11 . 2008-08-17 22:11 <REP> d-------- C:\Program Files\Samsung
    2008-08-17 21:20 . 2008-08-17 21:20 268 --ah----- C:\sqmdata02.sqm
    2008-08-17 21:20 . 2008-08-17 21:20 244 --ah----- C:\sqmnoopt02.sqm
    2008-08-17 21:19 . 2008-08-17 21:19 <REP> d-------- C:\Program Files\Services en ligne
    2008-08-17 15:46 . 2008-08-17 15:46 280 --ah----- C:\sqmdata01.sqm
    2008-08-17 15:46 . 2008-08-17 15:46 244 --ah----- C:\sqmnoopt01.sqm
    2008-08-17 14:04 . 2008-08-17 14:04 268 --ah----- C:\sqmdata00.sqm
    2008-08-17 14:04 . 2008-08-17 14:04 244 --ah----- C:\sqmnoopt00.sqm
    2008-08-15 17:30 . 2008-08-16 16:24 126 --a------ C:\WINDOWS\smrpro.INI
    2008-08-15 17:27 . 2008-08-15 17:27 <REP> d-------- C:\Program Files\Admiresoft
    2008-08-14 12:53 . 2008-08-14 12:53 <REP> d-------- C:\WINDOWS\system32\Lang
    2008-08-14 12:53 . 2008-08-14 12:53 940,794 --a------ C:\WINDOWS\system32\LoopyMusic.wav
    2008-08-14 12:53 . 2008-08-14 12:53 146,650 --a------ C:\WINDOWS\system32\BuzzingBee.wav
    2008-08-14 12:53 . 2008-08-15 14:56 60,416 --a------ C:\WINDOWS\ALCFDRTM.VER
    2008-08-14 12:53 . 2008-08-14 12:53 60,416 --a------ C:\WINDOWS\ALCFDRTM.EXE
    2008-08-09 00:56 . 2001-03-02 11:41 634 --a------ C:\WINDOWS\system32\MAPISVC.INF
    2008-08-08 20:08 . 2008-08-08 20:08 <REP> d--h----- C:\WINDOWS\PIF
    2008-08-05 20:23 . 2008-08-13 18:00 <REP> d-------- C:\Program Files\Norton Security Scan
    2008-08-05 20:17 . 2008-08-05 20:41 <REP> d-------- C:\WINDOWS\system32\Adobe
    2008-08-04 22:19 . 2008-08-20 02:15 116 --a------ C:\WINDOWS\NeroDigital.ini
    2008-08-04 21:19 . 2008-08-04 21:19 <REP> d-------- C:\Program Files\Xilisoft
    2008-08-03 21:14 . 2008-08-03 21:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WinZip
    2008-07-31 00:16 . 2008-08-17 22:13 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Samsung
    2008-07-31 00:13 . 2006-05-03 22:53 174,592 --a------ C:\WINDOWS\system32\framedyn.dll
    2008-07-31 00:12 . 2006-07-24 16:05 5,632 --a------ C:\WINDOWS\system32\drivers\StarOpen.sys
    2008-07-31 00:06 . 2008-07-31 00:06 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
    2008-07-30 21:33 . 2008-07-30 21:33 <REP> d-------- C:\Program Files\Fichiers communs\Nero
    2008-07-30 21:31 . 2008-07-30 21:31 <REP> d-------- C:\Program Files\Fichiers communs\Ahead
    2008-07-30 21:31 . 2008-07-30 21:31 <REP> d-------- C:\Program Files\Ahead
    2008-07-30 21:31 . 2004-07-26 16:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
    2008-07-30 21:31 . 2004-07-26 16:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
    2008-07-30 21:31 . 2004-07-26 16:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
    2008-07-30 21:31 . 2004-07-09 08:43 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll
    2008-07-30 21:31 . 2004-07-26 16:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
    2008-07-30 21:31 . 2001-07-09 10:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
    2008-07-30 21:31 . 2000-06-26 10:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
    2008-07-29 13:44 . 2008-07-29 13:44 <REP> d-------- C:\WINDOWS\Sun
    2008-07-29 13:44 . 2008-08-21 12:07 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\LimeWire
    2008-07-29 13:29 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
    2008-07-29 13:28 . 2008-07-29 13:29 <REP> d-------- C:\Program Files\Java
    2008-07-29 13:10 . 2008-07-29 13:10 <REP> d-------- C:\Program Files\Fichiers communs\Java
    2008-07-29 12:37 . 2008-07-29 14:31 <REP> d-------- C:\Program Files\LimeWire
    2008-07-28 20:50 . 2008-08-03 21:57 <REP> d-------- C:\Program Files\Total Video Converter
    2008-07-27 22:01 . 2008-07-27 22:01 <REP> d-------- C:\WINDOWS\system32\LogFiles
    2008-07-27 18:49 . 2008-07-27 18:49 <REP> d-------- C:\Documents and Settings\Administrateur\WINDOWS
    2008-07-27 18:49 . 1997-01-18 11:40 299,520 --a------ C:\WINDOWS\uninst.exe
    2008-07-26 23:09 . 2008-07-26 23:09 <REP> d-------- C:\Documents and Settings\Invité\Application Data\LuckyTender
    2008-07-26 19:48 . 2008-07-26 19:48 <REP> d-------- C:\Program Files\directx
    2008-07-26 19:47 . 2008-07-26 19:47 615 --a------ C:\WINDOWS\eReg.dat
    2008-07-25 21:45 . 2008-07-25 21:45 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\LuckyTender
    2008-07-25 20:52 . 2008-08-21 13:15 14 --a------ C:\WINDOWS\popcinfo.dat
    2008-07-25 20:48 . 2008-07-25 20:48 <REP> d-------- C:\Program Files\PopCap Games
    2008-07-25 16:09 . 2008-07-25 16:09 <REP> d-------- C:\Program Files\Alwil Software
    2008-07-25 16:09 . 2003-03-18 22:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
    2008-07-25 16:09 . 2003-03-18 21:14 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll
    2008-07-25 16:09 . 2003-02-21 05:42 348,160 --a------ C:\WINDOWS\system32\MSVCR71.dll
    2008-07-24 13:02 . 2008-07-21 01:01 <REP> d--h----- C:\Documents and Settings\Invité\Voisinage réseau
    2008-07-24 13:02 . 2008-07-21 01:01 <REP> d--h----- C:\Documents and Settings\Invité\Voisinage réseau
    2008-07-24 13:02 . 2008-07-21 01:01 <REP> d--h----- C:\Documents and Settings\Invité\Voisinage d'impression
    2008-07-24 13:02 . 2008-07-21 01:01 <REP> d--h----- C:\Documents and Settings\Invité\Voisinage d'impression
    2008-07-24 13:02 . 2008-07-20 23:12 <REP> d--h----- C:\Documents and Settings\Invité\Modèles
    2008-07-24 13:02 . 2008-07-20 23:12 <REP> d--h----- C:\Documents and Settings\Invité\Modèles
    2008-07-24 13:02 . 2008-07-24 13:06 <REP> d---s---- C:\Documents and Settings\Invité\Mes documents
    2008-07-24 13:02 . 2008-07-24 13:06 <REP> d---s---- C:\Documents and Settings\Invité\Mes documents
    2008-07-24 13:02 . 2008-07-21 01:01 <REP> dr------- C:\Documents and Settings\Invité\Menu Démarrer
    2008-07-24 13:02 . 2008-07-21 01:01 <REP> dr------- C:\Documents and Settings\Invité\Menu Démarrer
    2008-07-24 13:02 . 2008-07-24 13:03 <REP> d---s---- C:\Documents and Settings\Invité\Favoris
    2008-07-24 13:02 . 2008-07-24 13:03 <REP> d---s---- C:\Documents and Settings\Invité\Favoris
    2008-07-24 13:02 . 2008-08-20 22:53 <REP> d-------- C:\Documents and Settings\Invité\Bureau
    2008-07-24 13:02 . 2008-08-20 22:53 <REP> d-------- C:\Documents and Settings\Invité\Bureau
    2008-07-24 13:02 . 2008-08-21 20:17 <REP> d-------- C:\Documents and Settings\Invité
    2008-07-24 02:38 . 2008-07-24 02:39 <REP> d-------- C:\Program Files\Google
    2008-07-23 02:49 . 2008-08-14 17:26 <REP> d-------- C:\Documents and Settings\Administrateur\Contacts
    2008-07-23 02:48 . 2008-07-23 02:48 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
    2008-07-22 10:30 . 2008-08-17 13:51 <REP> d-------- C:\Program Files\EA Games
    2008-07-21 16:51 . 2008-07-21 16:57 <REP> d-------- C:\WINDOWS\I386
    2008-07-21 16:08 . 2008-07-21 16:08 <REP> d-------- C:\Program Files\uTorrent
    2008-07-21 16:08 . 2008-08-18 00:14 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\uTorrent
    2008-07-21 15:56 . 2008-04-30 11:00 571,392 --a------ C:\WINDOWS\system32\TINTLGNT.IME
    2008-07-21 15:54 . 2008-04-30 11:00 13,463,552 --a--c--- C:\WINDOWS\system32\dllcache\hwxjpn.dll
    2008-07-21 15:53 . 2001-08-23 17:47 8,704 --a------ C:\WINDOWS\system32\kbdjpn.dll
    2008-07-21 15:42 . 2008-08-18 00:17 <REP> d-------- C:\Downloads
    2008-07-21 01:23 . 2008-08-20 17:29 <REP> d-------- C:\Program Files\eMule
    2008-07-21 01:12 . 2008-08-21 21:17 <REP> d-------- C:\Program Files\FlashGet
    2008-07-21 01:08 . 2008-07-21 01:08 0 --a------ C:\WINDOWS\nsreg.dat
    2008-07-21 01:05 . 2008-04-13 21:33 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
    2008-07-21 01:05 . 2001-08-17 23:59 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
    2008-07-21 01:04 . 2008-04-13 21:33 77,312 --a------ C:\WINDOWS\system32\usbui.dll
    2008-07-21 01:04 . 2008-04-13 20:57 58,752 --a------ C:\WINDOWS\system32\drivers\redbook.sys
    2008-07-21 01:03 . 2008-07-23 02:47 <REP> d-------- C:\Program Files\Windows Live
    2008-07-21 01:03 . 2008-07-23 02:46 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
    2008-07-21 01:03 . 2008-07-23 20:49 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
    2008-07-21 01:03 . 2008-04-13 13:36 44,672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS
    2008-07-21 01:01 . 2008-08-19 01:43 <REP> d-------- C:\WINDOWS\system32\CatRoot2
    2008-07-21 01:01 . 2008-07-21 01:01 <REP> d--h----- C:\Documents and Settings\Default User\Voisinage réseau
    2008-07-21 01:01 . 2008-07-21 01:01 <REP> d--h----- C:\Documents and Settings\Default User\Voisinage d'impression
    2008-07-21 01:01 . 2008-07-20 23:12 <REP> d--h----- C:\Documents and Settings\Default User\Modèles
    2008-07-21 01:01 . 2008-07-21 01:01 <REP> d-------- C:\Documents and Settings\Default User\Mes documents
    2008-07-21 01:01 . 2008-07-21 01:01 <REP> dr------- C:\Documents and Settings\Default User\Menu Démarrer
    2008-07-21 01:01 . 2008-07-21 01:01 <REP> d-------- C:\Documents and Settings\Default User\Favoris
    2008-07-21 01:01 . 2008-07-21 01:01 <REP> d-------- C:\Documents and Settings\Default User\Bureau
    2008-07-21 01:01 . 2008-07-21 01:01 <REP> d--h----- C:\Documents and Settings\All Users\Modèles
    2008-07-21 01:01 . 2008-08-03 21:14 <REP> dr------- C:\Documents and Settings\All Users\Menu Démarrer
    2008-07-21 01:01 . 2008-07-21 01:01 <REP> d-------- C:\Documents and Settings\All Users\Favoris
    2008-07-21 01:01 . 2008-07-20 23:15 <REP> dr------- C:\Documents and Settings\All Users\Documents
    2008-07-21 01:01 . 2008-08-17 22:11 <REP> d-------- C:\Documents and Settings\All Users\Bureau

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-08-17 20:11 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-07-21 16:49 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
    2008-07-20 23:02 65,153 ----a-w C:\WINDOWS\BricoPackUninst.cmd
    2008-07-20 23:02 6,120 ----a-w C:\WINDOWS\BricoPackFoldersDelete.cmd
    2008-07-20 22:55 --------- d-----w C:\Program Files\S3
    2008-07-20 22:55 --------- d-----w C:\Program Files\Realtek AC97
    2008-07-20 22:51 28,672 ----a-w C:\WINDOWS\system32\ncmd.exe
    2008-07-20 21:17 --------- d-----w C:\Program Files\microsoft frontpage
    2008-07-20 21:12 --------- d-----w C:\Program Files\Windows Media Connect 2
    2008-04-27 23:25 337,417 --sha-w C:\WINDOWS\system32\SpiderH.vbs
    .

    ------- Sigcheck -------

    2008-04-30 11:00 809472 f284a6225a3057a1e19985e1d4b47ada C:\WINDOWS\system32\wininet.dll
    2008-04-30 11:00 809472 f284a6225a3057a1e19985e1d4b47ada C:\WINDOWS\system32\dllcache\wininet.dll

    2008-04-30 11:00 361344 accf5a9a1ffaa490f33dba1c632b95e1 C:\WINDOWS\system32\drivers\tcpip.sys

    2008-04-30 11:00 979968 3efe912dd25d2586e6a0341db0a66f69 C:\WINDOWS\explorer.exe
    2008-04-30 11:00 979968 3efe912dd25d2586e6a0341db0a66f69 C:\WINDOWS\system32\dllcache\explorer.exe

    2008-04-30 11:00 102400 478b314098276163edd8fcd47cc15be5 C:\WINDOWS\system32\wuauclt.exe
    2008-04-30 11:00 102400 478b314098276163edd8fcd47cc15be5 C:\WINDOWS\system32\dllcache\wuauclt.exe
    .
    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-30 11:00 15360]
    "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 11:34 5724184]
    "swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2008-07-24 02:39 171448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SpiderH"="C:\WINDOWS\system32\SpiderH.vbs" [2008-04-28 01:25 337417]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 16:38 78008]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
    "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
    "Flashget"="C:\Program Files\FlashGet\FlashGet.exe" [2007-09-25 10:10 2007088]
    "VTTimer"="VTTimer.exe" [2006-08-03 14:53 53248 C:\WINDOWS\system32\VTTimer.exe]
    "VTTrayp"="VTtrayp.exe" [2006-08-30 17:44 180224 C:\WINDOWS\system32\VTTrayp.exe]
    "SoundMan"="SOUNDMAN.EXE" [2006-11-17 05:42 577536 C:\WINDOWS\soundman.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "nltide_2"="shell32" [X]

    C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\
    RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2007-03-19 00:05:02 630784]
    TransBar.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe [2005-06-01 21:41:18 65536]
    Y'z Shadow.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe [2006-05-21 09:43:14 155648]

    C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2007-04-30 11:10:00 394856]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
    "ForceClassicControlPanel"= 1 (0x1)
    "NoSMHelp"= 1 (0x1)
    "NoSMConfigurePrograms"= 1 (0x1)
    "NoSMMyPictures"= 1 (0x1)
    "MemCheckBoxInRunDlg"= 1 (0x1)
    "NoSMBalloonTip"= 1 (0x1)
    "NoDesktopCleanupWizard"= 1 (0x1)
    "NoWelcomeScreen"= 1 (0x1)

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
    "ForceClassicControlPanel"= 1 (0x1)
    "NoSMHelp"= 1 (0x1)
    "NoSMConfigurePrograms"= 1 (0x1)
    "NoSMMyPictures"= 1 (0x1)

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    "FirewallOverride"=dword:00000001
    "AntiVirusDisableNotify"=dword:00000001
    "UpdatesDisableNotify"=dword:00000001
    "DisablePagingExecutive"=dword:00000001
    "SecondLevelDataCache"=dword:00000200

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)
    "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\Program Files\\eMule\\emule.exe"=
    "C:\\Program Files\\uTorrent\\uTorrent.exe"=
    "C:\\Program Files\\EA Games\\Command & Conquer The First Decade\\Command & Conquer(tm) Tiberian Sun(tm)\\SUN\\Game.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "C:\\Program Files\\LimeWire\\LimeWire.exe"=
    "C:\\Program Files\\FlashGet\\FlashGet.exe"=

    R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys [2008-04-30 11:00]
    R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35]
    R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37]
    S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-08-30 17:57]
    S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-08-30 17:58]
    S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-08-30 17:59]
    S3 tapvpn;TAP VPN Adapter;C:\WINDOWS\system32\DRIVERS\tapvpn.sys [2008-01-23 23:25]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{29894d88-6150-11dd-a530-00161725d8e6}]
    \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wallpaper.vbs
    \Shell\Explore\Command - Wscript \Wallpaper.vbs
    \Shell\Open\Command - Wscript \Wallpaper.vbs

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9c877d2c-56ae-11dd-95f1-806d6172696f}]
    \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wallpaper.vbs
    \Shell\Explore\Command - Wscript \Wallpaper.vbs
    \Shell\Open\Command - Wscript \Wallpaper.vbs

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cf572a4c-57c7-11dd-a50e-806d6172696f}]
    \Shell\AutoRun\command - D:\Autorun.exe

    *Newly Created Service* - CATCHME
    *Newly Created Service* - PROCEXP90
    *Newly Created Service* - SRSERVICE
    .
    Contenu du dossier 'Scheduled Tasks/Tâches planifiées'

    2008-08-13 C:\WINDOWS\Tasks\Norton Security Scan.job
    - C:\Program Files\Norton Security Scan\Nss.exe [2008-01-09 04:08]
    .
    .
    ------- Supplementary Scan -------
    .
    FireFox -: Profile - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tfxdpwkm.default\
    FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.fr/
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-21 21:20:56
    Windows 5.1.2600 Service Pack 3 NTFS

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************
    .
    --------------------- DLLs a chargé sous des processus courants ---------------------

    PROCESS: C:\WINDOWS\explorer.exe
    -> C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll
    .
    Temps d'accomplissement: 2008-08-21 21:23:03
    ComboFix-quarantined-files.txt 2008-08-21 19:22:39

    Pre-Run: 60,556,652,544 octets libres
    Post-Run: 60,865,470,464 octets libres

    256
    0
  4. viasnake Messages postés 179 Statut Membre 12
     
    pour toptiba
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:49:38, on 21/08/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0013)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\system32\VTtrayp.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    C:\Program Files\WinZip\WZQKPICK.EXE
    C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\WINDOWS\explorer.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://telecharger.phpnuke.org/fr/search-results?q=hompag
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [SpiderH] C:\WINDOWS\system32\SpiderH.vbs
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Flashget] "C:\Program Files\FlashGet\FlashGet.exe" /min
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
    O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
    O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
    O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
    O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
    O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. toptitbal Messages postés 5341 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 232
     
    Re

    Attends l'avis de plm69. Il t'a fait faire Combo, il doit analyser ton rapport et te dira quoi faire ensuite.
    0
  7. viasnake Messages postés 179 Statut Membre 12
     
    alooooooooo
    0

Discussions similaires

Chrome://newtab
Nova -
snoopy35_ -

14 réponses
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
Erreur 0x800700E1
Didiervd -
Viktimz -

11 réponses
impossible de terminer l’opération car virus Win 7
Slipt -
Malekal_morte- -

2 réponses