[Virus] Infecté par SpywareStrike Résolu

Question

Bonjour,Voila j'ai  un problème avec mon ordinateur j'ai un message qui s'affiche sans cesse et dès lors que j'allume mon pc dans ma barre de lancement rapide qui a pour titre "System Intrusion Detected!".Si quelqu'un de plus compétent peut me dire ce qu'il faut réparer... Merci BEAUCOUP par avance Voici le résultat du scan HijackThis: Logfile of HijackThis v1.99.1Scan saved at 02:19:56, on 08/01/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeC:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exeC:\Program Files\Norton AntiVirus
avapsvc.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exeC:\WINDOWS\system32\slserv.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Friendly Technologies\BroadbandAccess\fts.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\Logitech\Video\LogiTray.exeC:\WINDOWS\system32\USBPlug.exeC:\WINDOWS\system32\AVWLPSTA.EXEC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exeC:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\eMule\emule.exeC:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exeC:\WINDOWS\system32\LVComS.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\SpywareStrike\SpywareStrike.exeC:\Program Files\SpywareStrike\SpywareStrike.exeC:\WINDOWS\system32
vctrl.exeC:\WINDOWS\system32\mssearchnet.exeC:\Program Files\Sunbelt Software\CounterSpy\Consumer\CounterSpy.exeC:\WINDOWS\system32undll32.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\eMule\Incoming\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)R3 - URLSearchHook: (no name) - {2386E0E1-7CE9-5A38-3E74-C9036104CBCF} - ParisM.dll (file missing)O2 - BHO: HomepageBHO - {27150f81-0877-42e9-af13-55e5a3439a26} - C:\WINDOWS\system32\hpE2D1.tmpO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll (file missing)O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe"O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [dscService] C:\WINDOWS\system32\USBPlug.exeO4 - HKLM\..\Run: [AVWLPSTA.EXE] AVWLPSTA.EXEO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /ConsumerO4 - HKLM\..\Run: [DCC_send] ExchangeMaster.exeO4 - HKLM\..\Run: [startman] backd.exeO4 - HKLM\..\Run: [dmkao.exe] C:\WINDOWS\system32\dmkao.exeO4 - HKLM\..\Run: [SunServer] C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [UnSpyPC] "C:\Program Files\UnSpyPC\UnSpyPC.exe"O4 - HKCU\..\Run: [StatusCheck] cmon14.exeO4 - HKCU\..\Run: [qwe] ___.exeO4 - HKCU\..\Run: [ATLIEHELPER] new32.exeO4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStartO4 - HKCU\..\Run: [XPRepairBusiness] C:\Program Files\XP Repair Pro\xprepairpro.exe /sO4 - Global Startup: AudioDeck.lnk = C:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)O15 - Trusted Zone: http://ny.contentmatch.net (HKLM)O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1115545136826O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game19.zylom.servicesalacarte.wanadoo.fr/activex/zylomgamesplayer.cabO16 - DPF: {D19781C5-2051-44F8-8445-DDC82933C191} (VacPro.internazionale_ver11) - http://advnt01.com/dialer/internazionale_ver11.CABO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cabO16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://locator1.cdn.imagesrvr.com/sites/winfixer.com/www/pages/scanner_fr/WinFixer2005ScannerInstallFRA.cabO16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/it/Woo2/fr/chat/nPaxChat.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{03A8CACD-1DDF-42B0-86D1-DAB3EC34BD77}: NameServer = 85.255.114.57,85.255.112.148O17 - HKLM\System\CCS\Services\Tcpip\..\{2CA92099-ABE4-4A8C-91F1-7BAB9774D1FF}: NameServer = 85.255.114.57 85.255.112.148O17 - HKLM\System\CCS\Services\Tcpip\..\{51A85C06-A981-45AE-8BEC-7847AF22A025}: NameServer = 85.255.114.57,85.255.112.148O17 - HKLM\System\CCS\Services\Tcpip\..\{675E09FE-1D74-4722-A38A-BC2D9CF04485}: NameServer = 85.255.114.57,85.255.112.148O17 - HKLM\System\CCS\Services\Tcpip\..\{7F64C964-DC9B-417B-8F8E-6942A25942E7}: NameServer = 85.255.114.57,85.255.112.148O17 - HKLM\System\CCS\Services\Tcpip\..\{A6B1BC47-154C-461C-9290-F61A20DB9B00}: NameServer = 85.255.114.57,85.255.112.148O17 - HKLM\System\CS1\Services\Tcpip\..\{03A8CACD-1DDF-42B0-86D1-DAB3EC34BD77}: NameServer = 85.255.114.57,85.255.112.148O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs: MsgPlusLoader.dllO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
avapsvc.exeO23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeO23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exeJe vous remercie encore de l'aide que vous pourrez m'apporter :)

boulepate · Answer

Salut,
Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - {2386E0E1-7CE9-5A38-3E74-C9036104CBCF} - ParisM.dll (file missing)
O2 - BHO: HomepageBHO - {27150f81-0877-42e9-af13-55e5a3439a26} - C:\WINDOWS\system32\hpE2D1.tmp
O4 - HKLM\..\Run: [startman] backd.exe
O4 - HKLM\..\Run: [dmkao.exe] C:\WINDOWS\system32\dmkao.exe
O4 - HKCU\..\Run: [StatusCheck] cmon14.exe
O4 - HKCU\..\Run: [qwe] ___.exe
O4 - HKCU\..\Run: [ATLIEHELPER] new32.exe
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1115545136826
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game19.zylom.servicesalacarte.wanadoo.fr/activex/zylomgamesplayer.cab
O16 - DPF: {D19781C5-2051-44F8-8445-DDC82933C191} (VacPro.internazionale_ver11) - http://advnt01.com/dialer/internazionale_ver11.CAB
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://locator1.cdn.imagesrvr.com/sites/winfixer.com/www/pages/scanner_fr/WinFixer2005ScannerInstallFRA.cab
O16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/it/Woo2/fr/chat/nPaxChat.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{03A8CACD-1DDF-42B0-86D1-DAB3EC34BD77}: NameServer = 85.255.114.57,85.255.112.148
O17 - HKLM\System\CCS\Services\Tcpip\..\{2CA92099-ABE4-4A8C-91F1-7BAB9774D1FF}: NameServer = 85.255.114.57 85.255.112.148
O17 - HKLM\System\CCS\Services\Tcpip\..\{51A85C06-A981-45AE-8BEC-7847AF22A025}: NameServer = 85.255.114.57,85.255.112.148
O17 - HKLM\System\CCS\Services\Tcpip\..\{675E09FE-1D74-4722-A38A-BC2D9CF04485}: NameServer = 85.255.114.57,85.255.112.148
O17 - HKLM\System\CCS\Services\Tcpip\..\{7F64C964-DC9B-417B-8F8E-6942A25942E7}: NameServer = 85.255.114.57,85.255.112.148
O17 - HKLM\System\CCS\Services\Tcpip\..\{A6B1BC47-154C-461C-9290-F61A20DB9B00}: NameServer = 85.255.114.57,85.255.112.148
O17 - HKLM\System\CS1\Services\Tcpip\..\{03A8CACD-1DDF-42B0-86D1-DAB3EC34BD77}: NameServer = 85.255.114.57,85.255.112.148

Clique sur demarrer, rechercher, cherche un par un ces fichiers et supprime les:

backd.exe
dmkao.exe
cmon14.exe
___.exe
new32.exe

Puis remet un rapport HijackThis

bab3th · Answer

Merci j'ai bien recu ta réponse mais seulement j'ai toujours le message qui s'affiche :/Donc je remet le nouveau rapport de HijackThis en espérant trouvé rapidement une solution =) :Logfile of HijackThis v1.99.1Scan saved at 13:13:13, on 08/01/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeC:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeC:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exeC:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exeC:\Program Files\Norton AntiVirus
avapsvc.exeC:\WINDOWS\system32\mssearchnet.exeC:\WINDOWS\system32
vctrl.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\Program Files\Friendly Technologies\BroadbandAccess\fts.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\Logitech\Video\LogiTray.exeC:\WINDOWS\system32\USBPlug.exeC:\WINDOWS\system32\AVWLPSTA.EXEC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exeC:\WINDOWS\system32\LVComS.exeC:\WINDOWS\system32\slserv.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\eMule\Incoming\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: (no name) - {27150f81-0877-42e9-af13-55e5a3439a26} - C:\WINDOWS\system32\hp7E09.tmpO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll (file missing)O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe"O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [dscService] C:\WINDOWS\system32\USBPlug.exeO4 - HKLM\..\Run: [AVWLPSTA.EXE] AVWLPSTA.EXEO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /ConsumerO4 - HKLM\..\Run: [DCC_send] ExchangeMaster.exeO4 - HKLM\..\Run: [SunServer] C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [UnSpyPC] "C:\Program Files\UnSpyPC\UnSpyPC.exe"O4 - HKCU\..\Run: [StatusCheck] cmon14.exeO4 - HKCU\..\Run: [XPRepairBusiness] C:\Program Files\XP Repair Pro\xprepairpro.exe /sO4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStartO4 - Global Startup: AudioDeck.lnk = C:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)O15 - Trusted Zone: http://ny.contentmatch.net (HKLM)O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs: MsgPlusLoader.dllO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
avapsvc.exeO23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeO23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exeMerci pour votre aide =)

bab3th · Answer

Encore moi :pVoila le rapport de ewido --------------------------------------------------------- ewido anti-malware - Rapport de scan--------------------------------------------------------- + Créé le:		14:46:11, 08/01/2006 + Somme de contrôle:	14E7B906 + Résultats du scan:	HKLM\SOFTWARE\Classes\Interface\{4FE82BA0-9335-4D4E-8E98-76409A88F2C1} -> Spyware.TopConverting : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\Interface\{ACE5B10B-92A3-4103-8583-3684BB09409F} -> Spyware.TopConverting : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{487E7682-B976-41FB-A944-E8B83689A454} -> Spyware.TopConverting : Nettoyer et sauvegarder	HKLM\SOFTWARE\PowerScan -> Spyware.PowerScan : Nettoyer et sauvegarder	HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Explorer Bars\{8CBA1B49-8144-4721-A7B1-64C578C9EED7} -> Spyware.SideFind : Nettoyer et sauvegarder	HKU\S-1-5-21-1220945662-1123561945-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{08BEC6AA-49FC-4379-3587-4B21E286C19E} -> Spyware.SBSoft : Nettoyer et sauvegarder	HKU\S-1-5-21-1220945662-1123561945-839522115-1003\Software\PowerScan -> Spyware.PowerScan : Nettoyer et sauvegarder	HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Explorer Bars\{8CBA1B49-8144-4721-A7B1-64C578C9EED7} -> Spyware.SideFind : Nettoyer et sauvegarder	[792] C:\WINDOWS\system32
etwrap.dll -> Not-A-Virus.Hoax.Win32.Renos.am : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@112.2o7[2].txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@247realmedia[1].txt -> Spyware.Cookie.247realmedia : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@ad.adition[2].txt -> Spyware.Cookie.Adition : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@ad1.clickhype[1].txt -> Spyware.Cookie.Clickhype : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@adopt.euroclick[1].txt -> Spyware.Cookie.Euroclick : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@ads13.bpath[2].txt -> Spyware.Cookie.Bpath : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@adtech[2].txt -> Spyware.Cookie.Adtech : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@aolfr.122.2o7[1].txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@as1.falkag[1].txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@atdmt[2].txt -> Spyware.Cookie.Atdmt : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@b.casalemedia[1].txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@cz4.clickzs[2].txt -> Spyware.Cookie.Clickzs : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@cz6.clickzs[2].txt -> Spyware.Cookie.Clickzs : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@e-2dj6wjl4glc5geo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@e-2dj6wjliejazwbp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@estat[1].txt -> Spyware.Cookie.Estat : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@ilead.itrack[2].txt -> Spyware.Cookie.Itrack : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@ivwbox[2].txt -> Spyware.Cookie.Ivwbox : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@perf.overture[1].txt -> Spyware.Cookie.Overture : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@redcats.122.2o7[1].txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@rotator.adjuggler[1].txt -> Spyware.Cookie.Adjuggler : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@sfr.122.2o7[1].txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@srv1.ad.adition[1].txt -> Spyware.Cookie.Adition : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Cookies\elisabeth@www.smartadserver[2].txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\1C1C9B1D-A215-4F71-A023-492ED5\5EE380DE-062F-4DEC-B039-0C421E/C:/WINDOWS/system32/exdl.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\1C1C9B1D-A215-4F71-A023-492ED5\5EE380DE-062F-4DEC-B039-0C421E/C:/WINDOWS/system32/mqexdlm.srg -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\1C1C9B1D-A215-4F71-A023-492ED5\5EE380DE-062F-4DEC-B039-0C421E/C:/WINDOWS/system32/exul.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\1C1C9B1D-A215-4F71-A023-492ED5\5EE380DE-062F-4DEC-B039-0C421E/C:/WINDOWS/system32/javexulm.vxd -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\1C1C9B1D-A215-4F71-A023-492ED5\5EE380DE-062F-4DEC-B039-0C421E/C:/WINDOWS/system32/bbchk.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\1C1C9B1D-A215-4F71-A023-492ED5\5EE380DE-062F-4DEC-B039-0C421E/C:/WINDOWS/system32/msexreg.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\1C1C9B1D-A215-4F71-A023-492ED5\5EE380DE-062F-4DEC-B039-0C421E/C:/WINDOWS/system32/instsrv.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\20560A15-EE99-4E4B-B438-8A17CE -> Spyware.180Solutions : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\600DD116-5565-4790-87FB-DF4C72 -> Downloader.Small.asf : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\675B8F9D-BB95-495C-8CD8-F1A10F -> Downloader.Small.asf : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\714E823E-EB53-4E7E-B52B-C10540 -> Spyware.180Solutions : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\813F68EF-E057-47D8-8D08-A303CB -> Downloader.Small.asf : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\92F49460-EC76-4A83-91AD-339BC2 -> Downloader.Small.asf : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\A1ADE40E-D769-45D5-9B52-7860B1 -> Downloader.Small.asf : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\A75BFC6C-AA2D-4236-B4A2-54734C -> Spyware.180Solutions : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\BE78F196-687D-44CF-8618-B563B0 -> Downloader.Small.asf : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\C27029FE-3CBD-4709-A7B1-796995/clientax.dll -> Spyware.180Solutions : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\C27029FE-3CBD-4709-A7B1-796995/clientax.dll -> Spyware.180Solutions : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\CC5A48FF-B1DA-437E-BAF5-4D9A4C -> Downloader.Small.asf : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\DDAB21D5-8E53-4648-A65E-04583B -> Downloader.Small.asf : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\E78160CF-E031-44F7-864C-A4B362 -> Downloader.Small.asf : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\25AB71D4-0C76-49D4-A50E-328C1B\F376DDEC-0489-436F-9E16-2BECDD -> Downloader.Small.asf : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\6C157E4F-11C2-438D-9493-7C3E1E\B5DBE924-21F9-419D-B76F-2C7B8B -> Spyware.180Solutions : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\A4B9AE2B-ABB7-4EA7-AE51-C9B368\1E5D0F5C-FD0E-4709-AC8D-7CFA4B/UCMTSAIE.DLL -> Spyware.UCmore : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\A4B9AE2B-ABB7-4EA7-AE51-C9B368\1E5D0F5C-FD0E-4709-AC8D-7CFA4B/IUCMORE.DLL -> Spyware.UCmore : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Temp\Cookies\elisabeth@ads.pointroll[1].txt -> Spyware.Cookie.Pointroll : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Temp\Cookies\elisabeth@atdmt[2].txt -> Spyware.Cookie.Atdmt : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Temp\Cookies\elisabeth@bluestreak[1].txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Temp\Cookies\elisabeth@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Temp\Cookies\elisabeth@estat[1].txt -> Spyware.Cookie.Estat : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Temp\Cookies\elisabeth@www.smartadserver[1].txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder	C:\Documents and Settings\Elisabeth\Local Settings\Temporary Internet Files\Content.IE5\056ZC9UN\WinFixer2005ScannerInstallFRA[1].cab/UWFX5V_0001_N57M1412NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.b : Nettoyer et sauvegarder	C:\Program Files\eMule\Incoming\backups\backup-20060108-130511-471.dll -> Hijacker.StartPage.ahb : Nettoyer et sauvegarder	C:\WINDOWS\kansy.reg -> Trojan.WinREG.LowZones.f : Nettoyer et sauvegarder	C:\WINDOWS\system32\4.html -> Spyware.Linker : Nettoyer et sauvegarder	C:\WINDOWS\system32\config\systemprofile\Cookies\system@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder	C:\WINDOWS\system32\instsrv.exe -> Spyware.BargainBuddy : Nettoyer et sauvegarder	C:\WINDOWS\system32
etwrap.dll -> Not-A-Virus.Hoax.Win32.Renos.am : Nettoyer et sauvegarder	C:\WINDOWS\update-sp2.html -> Trojan.Lowzone.AL : Nettoyer et sauvegarder	D:\Elisabeth\Ma musique\My Playlists\Louise Attaque\Eurobarre\Eurofake.exe -> Worm.Kelvir.bp : Nettoyer et sauvegarder::Fin du rapportMerciiiiiiii =)

bab3th · Answer

Donc voila le rapport HijackThis:Logfile of HijackThis v1.99.1Scan saved at 14:58:17, on 08/01/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeC:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeC:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exeC:\Program Files\Friendly Technologies\BroadbandAccess\fts.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\Logitech\Video\LogiTray.exeC:\WINDOWS\system32\USBPlug.exeC:\WINDOWS\system32\AVWLPSTA.EXEC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exeC:\Program Files\Norton AntiVirus
avapsvc.exeC:\WINDOWS\system32\LVComS.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\WINDOWS\system32\slserv.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\WINDOWS\system32\msiexec.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\eMule\Incoming\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: HomepageBHO - {27150f81-0877-42e9-af13-55e5a3439a26} - C:\WINDOWS\system32\hp77C0.tmp (file missing)O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll (file missing)O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe"O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [dscService] C:\WINDOWS\system32\USBPlug.exeO4 - HKLM\..\Run: [AVWLPSTA.EXE] AVWLPSTA.EXEO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /ConsumerO4 - HKLM\..\Run: [DCC_send] ExchangeMaster.exeO4 - HKLM\..\Run: [SunServer] C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [XPRepairBusiness] C:\Program Files\XP Repair Pro\xprepairpro.exe /sO4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStartO4 - Global Startup: AudioDeck.lnk = C:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)O15 - Trusted Zone: http://ny.contentmatch.net (HKLM)O17 - HKLM\System\CCS\Services\Tcpip\..\{2CA92099-ABE4-4A8C-91F1-7BAB9774D1FF}: NameServer = 85.255.114.57 85.255.112.148O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs: MsgPlusLoader.dllO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
avapsvc.exeO23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeO23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe=)

bab3th · Answer

J'ai bien recu ton mail mais c'est pas vraiment correct :p
J'ai toujours le message System Intrusion Detected! (representé par une croix blanche sur fond rouge) qui continue d'apparaitre et de clignoter sans cesse :/
En ce qui concerne les anti spyware que tu m'as envoyé j'ai deja ad aware je vais dl les autre pour voir si ca marche
Mais mon probleme est toujours la :/
=''''''''''''''''(
Merci ton aide =)

bab3th · Answer

Lol merci Beaucoup que même boulepate =)Et bernie le message est toujours la :'''''''''''''(Aidezzzzzzzzzzzzz moi svpppp =)Merci par avance =)

bab3th · Answer

ReuhVoila le rapport et merci pour ton aide =)Logfile of HijackThis v1.99.1Scan saved at 15:20:50, on 08/01/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeC:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeC:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exeC:\Program Files\Friendly Technologies\BroadbandAccess\fts.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\Logitech\Video\LogiTray.exeC:\WINDOWS\system32\USBPlug.exeC:\WINDOWS\system32\AVWLPSTA.EXEC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exeC:\Program Files\Norton AntiVirus
avapsvc.exeC:\WINDOWS\system32\LVComS.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\WINDOWS\system32\slserv.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\eMule\Incoming\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: HomepageBHO - {27150f81-0877-42e9-af13-55e5a3439a26} - C:\WINDOWS\system32\hp77C0.tmp (file missing)O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll (file missing)O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe"O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [dscService] C:\WINDOWS\system32\USBPlug.exeO4 - HKLM\..\Run: [AVWLPSTA.EXE] AVWLPSTA.EXEO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /ConsumerO4 - HKLM\..\Run: [DCC_send] ExchangeMaster.exeO4 - HKLM\..\Run: [SunServer] C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [XPRepairBusiness] C:\Program Files\XP Repair Pro\xprepairpro.exe /sO4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStartO4 - Global Startup: AudioDeck.lnk = C:\Program Files\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136729265000O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs: MsgPlusLoader.dllO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
avapsvc.exeO23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeO23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

bernie61 · Answer

reok alors bon surf, merci surtout à Boulepatea+

bab3th · Answer

Encore merci beaucoup et merci d'avoir été aussi patient et aussi efficace =)

boulepate · Answer

De rien :-) Merci à toi aussi oeil de lynx  ^^ ;-)

[Virus] Infecté par SpywareStrike

10 réponses

Discussions similaires

Newsletters