Mon hidjack
bonjour
voici mon hidjack
je scan avec ravantivirus et le met dés que c'est fini
merci de votre aide.
bises.
Logfile of HijackThis v1.99.1
Scan saved at 14:58:56, on 28/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Fichiers communs\CMEII\CMESys.exe
C:\PROGRA~1\PHILIP~1\VProperty.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\program files\altnet\points manager\points manager.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\P2P Networking\P2P Networking.exe
C:\Program Files\Common files\SearchUpgrader\SearchUpgrader.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\windows\system32\sp2ctr.exe
C:\WINDOWS\ptcore.exe
C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe
C:\Program Files\Winamp\Winampa.exe
C:\windows\system32\dxvid.exe
C:\windows\system32\cd1.exe
C:\windows\system32\msevnt.exe
C:\windows\system32\mnhygqoa.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\AOL Compagnon\companion.exe
C:\Program Files\Fichiers communs\GMT\GMT.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\PROGRA~1\Altnet\DOWNLO~1\asm.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\Program Files\Fichiers communs\Aol\aoltpspd.exe
C:\Documents and Settings\Mlyn\Mes documents\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://server224.smartbotpro.net/7search/?new-hklm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://default-homepage-network.com/start.cgi?new-hklm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.mcarey.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - (no file)
O2 - BHO: NavErrRedir Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:\PROGRA~1\PERFEC~1\BHO\PERFEC~1.DLL
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: InstaFinder - {4E7BD74F-2B8D-469E-DCF7-F96DA086B434} - C:\WINDOWS\DOWNLO~1\instafin.dll
O2 - BHO: LinkTracker Class - {6A6E50DC-BFA8-4B40-AB1B-159E03E829FD} - C:\WINDOWS\system32\lmf32v.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [CMESys] "C:\Program Files\Fichiers communs\CMEII\CMESys.exe"
O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe
O4 - HKLM\..\Run: [DivX Video Duplicator OLR] C:\PROGRA~1\DIVXVI~1\BVRPOlr.exe /DivX Video Duplicator
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\system32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY
O4 - HKLM\..\Run: [SearchUpgrader] C:\Program Files\Common files\SearchUpgrader\SearchUpgrader.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [sp2ctr] c:\windows\system32\sp2ctr.exe /nocomm
O4 - HKLM\..\Run: [ijrbbpd] C:\WINDOWS\ptcore.exe
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [dxvid] c:\windows\system32\dxvid.exe /nocomm
O4 - HKLM\..\Run: [cd1] c:\windows\system32\cd1.exe /nocomm
O4 - HKLM\..\Run: [msevnt] c:\windows\system32\msevnt.exe /nocomm
O4 - HKLM\..\Run: [MNHYGQOA] c:\windows\system32\mnhygqoa.exe /install
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1061.dll,InstantAccess
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: AOL Compagnon.lnk = C:\Program Files\AOL Compagnon\companion.exe
O4 - Global Startup: GStartup.lnk = C:\Program Files\Fichiers communs\GMT\GMT.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {1604DF98-D1A5-44FE-844A-98D6FD0518D0} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1060_XP.cab
O16 - DPF: {1CD49DC9-FD88-41FA-B892-47E037267D45} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1059_XP.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {26D73573-F1B3-48C9-A989-E6CE071957A1} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1057_XP.cab
O16 - DPF: {31DDC1FD-CEA3-4837-A6DC-87E67015ADC9} - http://akamai.downloadv3.com/binaries/IA/svcsysnet32_FR_XP.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C6760A07-A574-4705-B113-7856315922C3} - http://akamai.downloadv3.com/binaries/IA/sysnetsvc32_FR_XP.cab
O16 - DPF: {C9269872-E3D6-4811-8E5E-835CA8CBD0B3} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1042_FR_XP.cab
O16 - DPF: {D1B80EBF-1A26-4FEC-B0B9-DCB934C6507E} (Loader Class) - http://dialup.carpediem.fr/CABS/cd/1,0,3,8/fr/AccesMembre.cab
O16 - DPF: {EFB22865-F3BC-4309-ADFA-C8E078A7F762} (SysWebTelecomInt Class) - http://www.sponsoradulto.com/fr/SysWebTelecom.cab
O16 - DPF: {FA83E942-B796-46DE-9155-1632ECC5473B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1061_XP.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1F87505B-4AAB-4C49-AA84-AA3F2849CA23}: NameServer = 205.188.146.145
O18 - Filter: text/html - {DFAA31C8-A356-4313-9D95-5EDAB46C5070} - C:\WINDOWS\system32\lmf32v.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPxySvc.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: McAfee.com Personal Firewall Service (MpfService) - McAfee.com Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Norton Internet Security Accounts Manager (NISUM) - Symantec Corporation - C:\Program Files\Norton Internet Security\NISUM.EXE
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
voici mon hidjack
je scan avec ravantivirus et le met dés que c'est fini
merci de votre aide.
bises.
Logfile of HijackThis v1.99.1
Scan saved at 14:58:56, on 28/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Fichiers communs\CMEII\CMESys.exe
C:\PROGRA~1\PHILIP~1\VProperty.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\program files\altnet\points manager\points manager.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\P2P Networking\P2P Networking.exe
C:\Program Files\Common files\SearchUpgrader\SearchUpgrader.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\windows\system32\sp2ctr.exe
C:\WINDOWS\ptcore.exe
C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe
C:\Program Files\Winamp\Winampa.exe
C:\windows\system32\dxvid.exe
C:\windows\system32\cd1.exe
C:\windows\system32\msevnt.exe
C:\windows\system32\mnhygqoa.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\AOL Compagnon\companion.exe
C:\Program Files\Fichiers communs\GMT\GMT.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\PROGRA~1\Altnet\DOWNLO~1\asm.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\Program Files\Fichiers communs\Aol\aoltpspd.exe
C:\Documents and Settings\Mlyn\Mes documents\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://server224.smartbotpro.net/7search/?new-hklm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://default-homepage-network.com/start.cgi?new-hklm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.mcarey.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - (no file)
O2 - BHO: NavErrRedir Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:\PROGRA~1\PERFEC~1\BHO\PERFEC~1.DLL
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: InstaFinder - {4E7BD74F-2B8D-469E-DCF7-F96DA086B434} - C:\WINDOWS\DOWNLO~1\instafin.dll
O2 - BHO: LinkTracker Class - {6A6E50DC-BFA8-4B40-AB1B-159E03E829FD} - C:\WINDOWS\system32\lmf32v.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [CMESys] "C:\Program Files\Fichiers communs\CMEII\CMESys.exe"
O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe
O4 - HKLM\..\Run: [DivX Video Duplicator OLR] C:\PROGRA~1\DIVXVI~1\BVRPOlr.exe /DivX Video Duplicator
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\system32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY
O4 - HKLM\..\Run: [SearchUpgrader] C:\Program Files\Common files\SearchUpgrader\SearchUpgrader.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [sp2ctr] c:\windows\system32\sp2ctr.exe /nocomm
O4 - HKLM\..\Run: [ijrbbpd] C:\WINDOWS\ptcore.exe
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [dxvid] c:\windows\system32\dxvid.exe /nocomm
O4 - HKLM\..\Run: [cd1] c:\windows\system32\cd1.exe /nocomm
O4 - HKLM\..\Run: [msevnt] c:\windows\system32\msevnt.exe /nocomm
O4 - HKLM\..\Run: [MNHYGQOA] c:\windows\system32\mnhygqoa.exe /install
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1061.dll,InstantAccess
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: AOL Compagnon.lnk = C:\Program Files\AOL Compagnon\companion.exe
O4 - Global Startup: GStartup.lnk = C:\Program Files\Fichiers communs\GMT\GMT.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {1604DF98-D1A5-44FE-844A-98D6FD0518D0} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1060_XP.cab
O16 - DPF: {1CD49DC9-FD88-41FA-B892-47E037267D45} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1059_XP.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {26D73573-F1B3-48C9-A989-E6CE071957A1} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1057_XP.cab
O16 - DPF: {31DDC1FD-CEA3-4837-A6DC-87E67015ADC9} - http://akamai.downloadv3.com/binaries/IA/svcsysnet32_FR_XP.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C6760A07-A574-4705-B113-7856315922C3} - http://akamai.downloadv3.com/binaries/IA/sysnetsvc32_FR_XP.cab
O16 - DPF: {C9269872-E3D6-4811-8E5E-835CA8CBD0B3} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1042_FR_XP.cab
O16 - DPF: {D1B80EBF-1A26-4FEC-B0B9-DCB934C6507E} (Loader Class) - http://dialup.carpediem.fr/CABS/cd/1,0,3,8/fr/AccesMembre.cab
O16 - DPF: {EFB22865-F3BC-4309-ADFA-C8E078A7F762} (SysWebTelecomInt Class) - http://www.sponsoradulto.com/fr/SysWebTelecom.cab
O16 - DPF: {FA83E942-B796-46DE-9155-1632ECC5473B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1061_XP.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1F87505B-4AAB-4C49-AA84-AA3F2849CA23}: NameServer = 205.188.146.145
O18 - Filter: text/html - {DFAA31C8-A356-4313-9D95-5EDAB46C5070} - C:\WINDOWS\system32\lmf32v.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPxySvc.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: McAfee.com Personal Firewall Service (MpfService) - McAfee.com Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Norton Internet Security Accounts Manager (NISUM) - Symantec Corporation - C:\Program Files\Norton Internet Security\NISUM.EXE
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
23 réponses
-
Contributeur sécuritédit tu as bien telecharger les prog que je t est dit au debut et tu les a utiliser
ad-aware (1)version 1.06
(ici) http://www.florensac-chasse-trap.com/ section virus
voir demo
http://pageperso.aol.fr/balltrap34/adwseflash.zip
--
spybot (2)version 1.4
(ici) http://www.florensac-chasse-trap.com/ section virus
voir demo
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm
--
et aussi ceci
CleanUp40.exe(3)
voir demo
http://pageperso.aol.fr/balltrap34/democleanup.htm
--
a2(4)
http://www.emsisoft.net/fr/
penser a le metre a jour avant de scanner le pc
-------
si tu ne fait pas exactement se que l ont te met cela vas ^pas marcher
-
re
que dois je faire maintenant ? -
comment trouvez vous le scan ?
merci -
re
voici le scan.
BitDefender Online Scanner - Rapport virus en temps réel
Généré à: Thu, Jul 28, 2005 - 20:27:36
--------------------------------------------------------------------------------
Info d'analyse
Fichiers scannés
169056
Infectés Fichiers
179
Virus Détectés
Trojan.Downloader.Wintrim.AW
1
Trojan.Downloader.Dluca.BA
145
Dropped:Trojan.Multidr.MH
1
Trojan.P2e.BY
2
Trojan.Downloader.Swizzor.CK
1
Adware.Lop
1
Trojan.Dialer.FA
1
Trojan.Downloader.Wintrim.AZ
2
Adware.Gator.B
2
Trojan.Wintrim.BG
1
Trojan.Wintrim.BH
1
Trojan.P2e.AI
2
Application.Dialer.Invis.B
1
Trojan.Spy.Mslagent.A
1
Trojan.Downloader.Dyfuca.DN
1
Trojan.Downloader.Wintrim.NI
1
Trojan.Multidr.MH
2
Trojan.Downloader.Agent.AD
1
Adware.Instafind.A
3
Trojan.Downloader.Wintrim.NAG
1
Trojan.Dialer.EG
3
Application.Dialer.EK
1
Trojan.Downloader.Wintrim.BA
1
Trojan.Downloader.Wintrim.CD
1
Trojan.Dialer.AW
1
Trojan.Trilon.A
1
--------------------------------------------------------------------------------
Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde. -
Contributeur sécuritére regarde dans ajout suppr de prog si tu trouve ceci
sp2ctr si oui desinstal -
Contributeur sécuritédonc pas de ads
fait un scan ici il desinfect en ligne
Scan bit defender
http://www.bitdefender.fr
clik sur scan on line a gauche et suis la procedure -
re
est ce ca ?
AboutBuster 5.0 reference file 31
Scan started on [28/07/2005] at [19:14:59]
------------------------------------------------
No Ads Found!
------------------------------------------------
No Files Found!
------------------------------------------------
Scan was COMPLETED SUCCESSFULLY at 19:15:45 -
Contributeur sécuritédesoler quand tu quitte le prog il met un fichier texte dans le meme dossier ou tu as telecharger et decompresser about buster
-
re
je n'aie pas de case "save log" :o( -
Contributeur sécuritéil y a une case save log
et tu retrouve le log la ou tu as mis about buster -
re
quand le scan est fini , une fenetre s'ouvre est me dit que le scan a ete fait, et quand je clik sur ok ca vire mon scan et ne peut pas le copier. -
Contributeur sécuritécelui que tu veut et pour le mettre a jour
tu clik sur update et tu suis le procedure -
et telecharge ceci
About:Buster.
Tu le télécharges sur :
http://www.majorgeeks.com/download4289.html
tu le met a jour et tu scan avedc et donne le rapport stp
_________________________________________________
pour le dl ou faut il aller ? est ce sur "majorgeeks france)?
si oui que fait on apres pour le mettre a jour stp je suis perdue.
merci de ton aide
bises. -
Contributeur sécuritésalut stepf
Faite votre propre message comme ceci
Voir demo
http://pageperso.aol.fr/balltrap34/demofairesontmessage.htm
-
Contributeur sécuritéle log ont verrat plus tard
Désactiver restauration
il faut la désactiver
pour ça tu fais clic droit sur poste de travail
propriété tu clique sur onglet restauration système
tu coche la case désactiver la restauration et applique
et telecharge ceci
About:Buster.
Tu le télécharges sur :
http://www.majorgeeks.com/download4289.html
tu le met a jour et tu scan avedc et donne le rapport stp
clik "Check for updates".
telecharge les mises a jour
utilise ceci pourtant je te l est mis au debut
http://pageperso.aol.fr/Balltrap34/CleanUp40.exe
voir demo
http://pageperso.aol.fr/balltrap34/democleanup.htm-
bonjour j'ai le meme probleme
peut tu m'aider?
Logfile of HijackThis v1.99.1
Scan saved at 18:05:52, on 28/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\SurfAccuracy\SAcc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Softwin\BitDefender8\bdoesrv.exe
C:\progra~1\softwin\bitdef~1\bdnagent.exe
C:\Program Files\Softwin\BitDefender8\bdswitch.exe
C:\WINDOWS\system32\ctfmon.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\SuperCopier\SuperCopier.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender8\vsserv.exe
c:\progra~1\softwin\bitdef~1\bdmcon.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\CHAILLOT\LOCALS~1\Temp\Rar$EX01.688\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.aofofleeekaftopw.com/zqh2DmA2K/iRkfl4tLJnbm749yodS3tJt/RrAeFxjyZEe4Y89T0n4OaWiys3yYlP.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://f002.mail.caramail.lycos.fr/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll
O2 - BHO: (no name) - {DA839D30-E538-3BE8-D99A-75E47CD0F895} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [junk jugs mags idle] C:\Documents and Settings\All Users\Application Data\browse peak junk jugs\JumpEq.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [BDMCon] c:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDOESRV] C:\Program Files\Softwin\BitDefender8\\bdoesrv.exe
O4 - HKLM\..\Run: [BDNewsAgent] "c:\progra~1\softwin\bitdef~1\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] C:\Program Files\Softwin\BitDefender8\\bdswitch.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [kind owns] C:\DOCUME~1\CHAILLOT\APPLIC~1\FORLOA~1\Rdr Clock Copy.exe
O4 - HKCU\..\Run: [SuperCopier.exe] C:\Program Files\SuperCopier\SuperCopier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - Startup: wkcalrem.lnk = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .tif: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin7.dll
O16 - DPF: Interface Chat Wanadoo - http://chat14.x-echo.com/version6/Applet/wchatsign.cab
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab30149.cab
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {42E1F024-ECC3-456F-B98A-4CE5ACDBF25C} (ActiveFormX Contrôle) - https://ssl-tb.sitadelle.com/selfcare.cegetel.net/templates/static/ocx/AFAutoConfig.ocx
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab30149.cab
O16 - DPF: {92ABACFE-EF6E-42C7-A824-D50A914B5B70} (MastaCash Loader Class) - http://dx.mastacash.com/loader.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab30149.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{43B7D90B-6CD4-47E4-9907-F6936F9ADC95}: NameServer = 217.19.192.132 217.19.192.131
O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\Program Files\Fichiers communs\AOL\AOL Spyware Protection\\aolserv.exe (file missing)
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender8\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
-
-
re
Logfile of HijackThis v1.99.1
Scan saved at 17:46:02, on 28/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Norton Internet Security\ccPxySvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\PROGRA~1\PHILIP~1\VProperty.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\program files\altnet\points manager\points manager.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe
C:\Program Files\Winamp\Winampa.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Altnet\DOWNLO~1\asm.exe
C:\WINDOWS\system32\P2P Networking\P2P Networking.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\AOL Compagnon\companion.exe
C:\Program Files\Fichiers communs\GMT\GMT.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\Program Files\Fichiers communs\Aol\aoltpspd.exe
C:\Documents and Settings\Mlyn\Mes documents\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe
O4 - HKLM\..\Run: [DivX Video Duplicator OLR] C:\PROGRA~1\DIVXVI~1\BVRPOlr.exe /DivX Video Duplicator
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [SearchUpgrader] C:\Program Files\Common files\SearchUpgrader\SearchUpgrader.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\system32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1061.dll,InstantAccess
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: AOL Compagnon.lnk = C:\Program Files\AOL Compagnon\companion.exe
O4 - Global Startup: GStartup.lnk = C:\Program Files\Fichiers communs\GMT\GMT.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1F87505B-4AAB-4C49-AA84-AA3F2849CA23}: NameServer = 205.188.146.145
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPxySvc.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: McAfee.com Personal Firewall Service (MpfService) - McAfee.com Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Norton Internet Security Accounts Manager (NISUM) - Symantec Corporation - C:\Program Files\Norton Internet Security\NISUM.EXE
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
et pour le scan que faut il faire ?
merci. -
y'a du boulot
Scan started at 28/07/2005 15:37:03
Scanning memory...
process://C:\WINDOWS\ptcore.exe - Backdoor:Win32/Agent.BG -> Infected
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\Mlyn\Local Settings\Temp\ss5dd.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\Documents and Settings\Mlyn\Local Settings\Temp\ss5ef.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\Documents and Settings\Mlyn\Local Settings\Temp\ss62a.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\Documents and Settings\Mlyn\Local Settings\Temp\ss63b.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\Documents and Settings\Roxane\Local Settings\Temp\ss9dc.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\Documents and Settings\Roxane\Local Settings\Temp\ssa20.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\Documents and Settings\Roxane\Local Settings\Temp\ssb6.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\Documents and Settings\Roxane\Mes documents\Mes vidéos\GameData\nina.exe - Tool:PornDialer.IE.dam#2 -> Infected
C:\Program Files\Carpe Diem\Oversexe_gays\CDUpdater.exe - Tool:PornDialer.GS -> Infected
C:\Program Files\Montorgueil\ParisVoyeur\ParisVoyeur.exe->(UPXW) - Trojan:Win32/Dialer.EG -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP171\A0128339.exe - TrojanDownloader:Win32/Dluca.AI -> Infected
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP195\A0130934.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP195\A0130991.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP196\A0132015.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP198\A0133137.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP202\A0134386.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP207\A0136735.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP208\A0136916.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP208\A0136948.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP208\A0136956.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP208\A0136963.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP208\A0136970.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP208\A0137022.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP213\A0139483.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\HLInstaller7b.exe - Trojan:Win32/SecondThought.R.dr -> Infected
C:\WINDOWS\ptcore.exe - Backdoor:Win32/Agent.BG -> Infected
C:\WINDOWS\tmlpmg.exe - TrojanDownloader:Win32/Wintrim.CD -> Infected
C:\WINDOWS\mslagent\3_1,0,1,4_mslagent.dll - TrojanDownloader:Win32/Agent.AD -> Infected
C:\WINDOWS\system32\abcdefgh.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\acztmgad.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\aescrrev.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\agccspxa.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ajzzsesz.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\aoybsoip.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\aprhxcha.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\argwwprg.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\avhshjwn.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\berxfglr.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\bhfiogyk.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\bilfkooz.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\bjfamaor.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\bmfzrvxx.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\bpnjkayy.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\bqcecomc.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\cagqgtyy.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\cbisrmym.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\cdxkfyjt.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\clavxfyw.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\cqwceyyd.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\dazzrqju.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\dgmdtkdj.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\dlfkwbpd.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\drisrmni.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\dswecyaf.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\dzywlwyp.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\echguzou.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\efpbcalo.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\egblleac.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\EGCOMLIB2.dll - Tool:PornDialer.ED -> Infected
C:\WINDOWS\system32\elkhhafp.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\elkolfeo.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\engmiacm.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\fastvideoplayer.dll - TrojanDownloader:Win32/Dyfuca.AA -> Infected
C:\WINDOWS\system32\fcfigmgu.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\fdemrrlv.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\fjlzsadd.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\fqxprkam.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ftosczds.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\fyidmrqs.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\fzxzvfcf.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\gddbzxfw.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\gempmrrb.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\gffiamvu.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\gfvhhted.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\giiwmrcz.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\gjhoqymq.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\gjkoslhh.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\gzrqsupi.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\hjqaehuq.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\hlbsymuy.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\hqhtgcmr.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\hrgkwqav.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\hxvcqxoi.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\HyperLinker7.exe - Trojan:Win32/SecondThought.R.dr -> Infected
C:\WINDOWS\system32\ibjzycyf.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\idduqcnc.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\idhnshwh.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ifcdukiy.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ilobrplt.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\jbbbnscz.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\jbdyhbqq.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\jdesxgee.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\jfbpfrnq.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\jgwzvygx.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\jlbcyuji.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\jspcworz.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\jzewfgnj.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\jzhmtobz.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\jzxeeoby.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ksjdicmf.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\kxriqidv.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ljumnkjs.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\lpekxjup.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\lplroyal.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\maiooosb.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\mkouybfg.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\mnhygqoa.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\msklive.dll - TrojanSpy:Win32/Mslagent -> Infected
C:\WINDOWS\system32\muaqmnyb.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\muwbngec.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\navskqjc.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\nethv32.dll - Trojan:Win32/Dialer.FA -> Infected
C:\WINDOWS\system32\netia32.dll - Trojan:Win32/Trilon.A -> Infected
C:\WINDOWS\system32\ngzimuye.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\nhzcevse.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\nkoiqfgr.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\nnrkvpkj.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\nszddwhl.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\numgirup.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\nvnunmfy.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\obqhwcge.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ogtqfilh.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ooqtvrtb.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ovxfsgnh.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\paeopshc.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\pbslnumu.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\pfpyjkia.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\pjzeyvmk.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\plnuelnc.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\plpknhlq.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ptvcuxfa.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\pudolads.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\qabotqds.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\qlexdupg.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\qmaznvlh.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\qqowgrcg.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\qyhzhihi.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\rcgaxnhy.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\rdstyonv.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\riogzljm.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\rqysgeeq.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\rtqagbuc.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\rzwvjsvb.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\sixavvcy.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\slnspcoz.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\svygussr.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\szsixruf.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\szwejtce.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\tbmvnsxz.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\tkoxgttj.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\tlzzfjkx.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\tnixrdkv.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\tocxzwch.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\tounhtuj.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\twynsncb.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\tzwoyzcd.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\uhusxtsh.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\uistxghk.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ujuasuaz.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\vasrmiyz.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\vbxqscrm.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\vehsdpfn.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\vmbiaczs.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\vpgzmehg.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\vrhipupj.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\vzislnms.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\wemhklot.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\wequmtma.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\wlhdwzvw.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\wuqowrmr.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\xcihlxuu.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\xevdnrcr.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\xodbwbxr.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\xogjzeff.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ycmeuahm.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\ylgqaltf.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\yqpatgek.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\zaaortxw.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\zhramtqx.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\system32\zygcaoqi.exe - TrojanDownloader:Win32/Dluca -> Suspicious
C:\WINDOWS\Temp\MT\ParisVoyeur[1].exe->(UPXW) - Trojan:Win32/Dialer.EG -> Suspicious
Scanned
============================
Objects: 92272
Directories: 8670
Archives: 6724
Size(Kb): -1187038
Infected files: 14
Found
============================
Viruses found: 13
Suspicious files: 168
Disinfected files: 0
Mail files: 93 -
Contributeur sécuritépas de soucis
C:\APPS\IE\offline\fr.htm
C:\PROGRA~1\PERFEC~1<==le dossier
C:\WINDOWS\DOWNLO~1\instafin.dll
C:\WINDOWS\system32\lmf32v.dll
C:\Program Files\Fichiers communs\CMEII<==le dossier
C:\Program Files\Common files\SearchUpgrader<==le dossier
c:\windows\system32\sp2ctr.exe
C:\WINDOWS\ptcore.exe
c:\windows\system32\dxvid.exe
c:\windows\system32\cd1.exe c:\windows\system32\msevnt.exe
c:\windows\system32\mnhygqoa.exe
C:\WINDOWS\system32\lmf32v.dll
-
merci
peux tu me mettre en gras ce qu'il faut supprimer ici stp , ca m'évitera de faire des bétises.
.recherche et suppr ceci
attention seulement les fichiers si tu trouve
C:\APPS\IE\offline\fr.htm
C:\PROGRA~1\PERFEC~1<==le dossier
C:\WINDOWS\DOWNLO~1\instafin.dll
C:\WINDOWS\system32\lmf32v.dll
C:\Program Files\Fichiers communs\CMEII<==le dossier
C:\Program Files\Common files\SearchUpgrader<==le dossier
c:\windows\system32\sp2ctr.exe
C:\WINDOWS\ptcore.exe
c:\windows\system32\dxvid.exe
c:\windows\system32\cd1.exe
c:\windows\system32\msevnt.exe
c:\windows\system32\mnhygqoa.exe
C:\WINDOWS\system32\lmf32v.dll
bises -
Contributeur sécuritésalut
d abord regarde si tu trouve ceci dans ajout suppression de programme
CMEII\CMESys.exe si oui desinstal
imprime ceci pour ne rien oublier et tous faire
tous faire dans l ordre imperativement
-------------------------
tous da bord telecharge ces programmes si tu ne les a pas et met les a jour mais ne les utilise pas encore et verifie que tu as les bonnes version c est imperatif
ad-aware (1)version 1.06
(ici) http://www.florensac-chasse-trap.com/ section virus
voir demo
http://pageperso.aol.fr/balltrap34/adwseflash.zip
- 1
- 2
Suivant
