Comment supprimmer un trojan ?????

raftos -  
Bonjour,
g un virus trojan generic.vdt sa mkass pa trp la tete me sa ralenti mon pc jaimerai ke klk1 maide please psk chui trp sec en ordi
Configuration: Windows XP
Firefox 3.0.1

18 réponses

  2. raftos
    wsh girly sa va tu ty coner toi??? please help me
    0
    1. g!rly Contributeur
      lol raftos

      je suis pas en forme mais aller

      Télécharge HijackThis ici :

      -> http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

      Tutoriel d´instalation : (Merci a Balltrap34 pour cette réalisation)

      -> http://pageperso.aol.fr/balltrap34/Hijenr.gif

      Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

      -> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

      Post le rapport généré ici stp...
      0
      1. Utilisateur anonyme
        alors cette playa ...

        kisses a los 2
        0
        2. g!rly Contributeur
          pffff
          0
          1. Utilisateur anonyme
            pour toi c est piscine vu ou tu es

            Biz ma belle

            ps: FindyKillbeta
            0
        3. raftos
          ok wee att c cho ske tu demande la sorry si chui trp lent
          0
          1. g!rly Contributeur
            ha ha
            tout est expliqué, ca risk de se corser par la suite...
            0
            1. raftos
              c bon trnkill chui entrain dinstaller MERCI c koi le rapport generer ///?????
              0
              2. g!rly Contributeur
                et il est ou le rapport ?
                0
                1. Utilisateur anonyme
                  mé il est ou ....... Ze rapport .....

                  @+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
                  0
                  1. g!rly Contributeur
                    parti faire une party dans la foret
                    0
                    1. raftos
                      unning processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\WINDOWS\system32\S3tray2.exe
                      C:\PROGRA~1\AVG\AVG8\avgtray.exe
                      C:\Program Files\Windows Live\Family Safety\fssui.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
                      C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                      C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                      C:\PROGRA~1\AVG\AVG8\avgrsx.exe
                      C:\PROGRA~1\AVG\AVG8\avgemc.exe
                      C:\WINDOWS\system32\wuauclt.exe
                      C:\Program Files\AVG\AVG8\avgui.exe
                      C:\Program Files\AVG\AVG8\avgscanx.exe
                      C:\Program Files\Mozilla Firefox\firefox.exe
                      C:\Program Files\Windows Live\Messenger\usnsvc.exe
                      C:\Trend Micro\HijackThis\HijackThis.exe

                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?p=us
                      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us
                      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
                      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
                      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
                      O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
                      O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
                      O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
                      O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
                      O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fssui.exe" -autorun
                      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
                      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
                      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
                      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
                      O20 - AppInit_DLLs: avgrsstx.dll
                      O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
                      O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

                      c bon?????
                      0
                      1. raftos
                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 19:50:59, on 29/08/2008
                        Platform: Windows XP SP2 (WinNT 5.01.2600)
                        MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                        Boot mode: Normal

                        Running processes:
                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\WINDOWS\system32\S3tray2.exe
                        C:\PROGRA~1\AVG\AVG8\avgtray.exe
                        C:\Program Files\Windows Live\Family Safety\fssui.exe
                        C:\WINDOWS\system32\ctfmon.exe
                        C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
                        C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                        C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                        C:\PROGRA~1\AVG\AVG8\avgrsx.exe
                        C:\PROGRA~1\AVG\AVG8\avgemc.exe
                        C:\WINDOWS\system32\wuauclt.exe
                        C:\Program Files\AVG\AVG8\avgui.exe
                        C:\Program Files\AVG\AVG8\avgscanx.exe
                        C:\Program Files\Mozilla Firefox\firefox.exe
                        C:\Program Files\Windows Live\Messenger\usnsvc.exe
                        C:\Trend Micro\HijackThis\HijackThis.exe
                        C:\Trend Micro\HijackThis\HijackThis.exe

                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?p=us
                        R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us
                        R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
                        O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
                        O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
                        O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
                        O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
                        O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
                        O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
                        O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fssui.exe" -autorun
                        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                        O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
                        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                        O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
                        O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
                        O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
                        O20 - AppInit_DLLs: avgrsstx.dll
                        O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
                        O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                        0
                        1. raftos
                          att mon ordi i bug vit fe jle raalume tu peu attendre 10 mn
                          0
                          1. g!rly Contributeur
                            re

                            il n´y a rien de visible...

                            Fais un scan avec cet antispyware :

                            Telecharge malwarebytes + tutoriel :

                            -> https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

                            Tu l´instale; le programme va se mettre automatiquement a jour.

                            Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

                            Click maintenant sur l´onglet recherche et coche la case : "executer un examun complet".

                            Puis click sur "rechercher".

                            Laisse le scanner le pc...

                            Si des elements on ete trouvés > click sur supprimer la selection.

                            si il t´es demandé de redemarrer > click sur "yes".

                            A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.

                            Copie et colle le rapport stp.

                            @+
                            0
                            1. raftos
                              ba jcroi g pu r1 en ft psk le rapport i di ke ya pa d infection me mon ordi il et tjr lent jcompren pa pk????
                              0

                              Discussions similaires

                              Aide pour un virus
                              cerise92700

                              41 réponses
                              Trojan impossible à supprimer!
                              Gridouu

                              12 réponses
                              Comment supprimer le virus Trojan
                              vitsou

                              18 réponses
                              Cheval de Troie- e.tre456.worm.windows
                              Ninou037

                              13 réponses
                              trojan-spy.win32@mx
                              caramel79

                              3 réponses