aider moi svp virus spyware Résolu

Question

pouvez vous verifier cela pour moi svp je quoi  que jai des virus ou autres Logfile of HijackThis v1.99.1Scan saved at 11:06:24, on 01/05/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\TQ\command.exeC:\Program Files\Network Monitor
etmon.exeC:\WINDOWS\systay.exeC:\WINDOWS\system32undll32.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\PROGRA~1\MESSAG~1\StartMessager.exeC:\WINDOWS\inet20001\services.exeC:\WINDOWS\sachostx.exeC:\WINDOWS\smss.exeC:\Program Files\efqlvsam.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\Program Files\eMule\emule.exeC:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exeC:\WINDOWS\System32\drwtsn32.exeC:\Documents and Settings\ginger\Mes documents\Document Ginger\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXER1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - Default URLSearchHook is missingO2 - BHO: ib.CBrowserHelper - {1E6CE4CD-161B-4847-B8BF-E2EF72299D69} - C:\WINDOWS\System32\ib14.dllO2 - BHO: (no name) - {6001CDF7-6F45-471b-A203-0225615E35A7} - C:\WINDOWS\DH.dllO2 - BHO: (no name) - {696BD5EC-A5DF-40C1-B614-22D934AB28B5} - C:\Program Files\Windows NT
idyqyk.dllO2 - BHO: XBTB04715 - {A8B0BDED-64A5-495b-97DA-42C0301E229B} - C:\PROGRA~1\TOOLBA~1\TOOLBA~1.DLLO2 - BHO: Trixie.Bho - {B0744341-96E0-4341-9ED2-8BC36CE0CCD0} - mscoree.dll (file missing)O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager WanadooO4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager WanadooO4 - HKLM\..\Run: [keyboard] C:\windows\keyboard15.exeO4 - HKLM\..\Run: [xp_system] C:\WINDOWS\inet20001\services.exeO4 - HKLM\..\Run: [SystemLoader] C:\WINDOWS\sysldr32.exeO4 - HKLM\..\Run: [sachost] C:\WINDOWS\sachostx.exeO4 - HKLM\..\Run: [Software Soft Stop] C:\Program Files\Spyware Soft Stop\Spyware Soft Stop.exeO4 - HKLM\..\Run: [Microsoft Windows Session Manager Subsystem] C:\WINDOWS\smss.exeO4 - HKLM\..\Run: [Microsoft Windows Logon Process] C:\WINDOWS\winlogon.exeO4 - HKLM\..\Run: [SysTray] C:\Program Files\efqlvsam.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO9 - Extra button: (no name) - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\System32\mscoree.DLLO9 - Extra 'Tools' menuitem: Tri&xie Options... - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\System32\mscoree.DLLO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO20 - AppInit_DLLs: MsgPlusLoader.dllO20 - Winlogon Notify: DateTime - C:\WINDOWS\system32\ojcache.dllO20 - Winlogon Notify: xptptt - C:\WINDOWS\SYSTEM32\xptptt.dllO21 - SSODL: SysTray.Exgl - {636821FC-6F5C-2f1b-B164-E67214F678E2} - C:\WINDOWS\System32\cgpojloe.dllO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\TQ\command.exeO23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown owner - C:\WINDOWS\winlogon.exe" -service (file missing)O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor
etmon.exeO23 - Service: TrueVector Internet Monitor (vsmon) - Unknown owner - C:\WINDOWS\system32\ZONELABS\vsmon.exeO23 - Service: Windows System Tray - Unknown owner - C:\WINDOWS\systay.exe

aranjuez31 · Answer

et B O N J O U R
y en a pas ?
cela fait si plaisir aux robots bénevoles.....
=========
vachement pourri ton logfile
=====
commence par ceci

0/ - Smitfraudfix
(A) -Télécharger ceci (merci a S!RI pour ce petit programme) :
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
L'exécuter, puis double-cliquer sur Smitfraudfix.cmd
Choisir l’option 1, elle va générer un rapport
Copie-COLLE ce dernier dans un message sur le forum.
Tutorial imagée à lire :
http://siri.urz.free.fr/Fix/SmitfraudFix.php
(B) - Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du PC sans t’arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape ‘Entrée’ sur ton clavier.
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres, c’est normal !
(Si F8 ne marche pas utilise la touche F5).
(C) --Relance le programme Smitfraud,
Cette fois choisit l’option 2, répond OUI à tout ;
Sauvegarde le rapport, redémarre en mode normal, copie-COLLE le rapport sauvegardé sur le forum.

cela ne suffira sans doute pas

après avoir posté le 2 rapports ddés
tu remettras un hijack

la miss972 · Answer

smit fraud cmdt ne veux pas souvrir

aranjuez31 · Answer

re
l'as-tu dézippé ?
=========
fais ceci aussi

3/ - Ewido (download)- gratuit même après 14 jours d’essai
http://perso.wanadoo.fr/entraide-hijackthis/Ewido/
Copie/COLLE le rapport généré sur ce forum

4/ - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
Télécharge ici :
https://www.ccleaner.com/ccleaner/download
Tutorial ici:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

6/ - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX)
https://assiste.com/404_La_page_demandee_n_existe_pas.php
Copie/COLLE le rapport entier

la miss 972 · Answer

salut cest vrai vous mavez deja aider mais jai du reinstaller mon xp et je sais plus ou jen suis jai plein de probleme qui apparraisens dessus donc si vous voulez toujour maider je met quand meme les rapport  que vous avez demander merci

aranjuez31 · Answer

ola amigode tte façon, elle continue par ne rien produireon verra bien et j ai pas mal de boulot par ailleurs......bientôt prêt pour le grd voyage ?

la miss972 · Answer

salut voici le rapport ewido ---------------------------------------------------------
ewido anti-malware - Rapport de démarrage
---------------------------------------------------------

+ Créé le: 08:40:54, 05/05/2006
+ Somme de contrôle: 1C7E6E57

File\WinIni\Run C:\WINDOWS\inet20001\services.exe C:\WINDOWS\inet20001\services.exe
Reg\HKLM\Run MessengerPlus3 "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
Reg\HKLM\Run MessagerStarter Wanadoo C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
Reg\HKLM\Run SystemLoader C:\WINDOWS\sysldr32.exe
Reg\HKLM\Run AVG7_EMC C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
Reg\HKLM\Run Microsoft Windows Logon Process C:\WINDOWS\winlogon.exe
Reg\HKLM\Run SysTray C:\Program Files\paytime.exe
Reg\HKLM\Run AVG7_CC C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
Reg\HKLM\Run AVG7_EMC C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
Reg\HKLM\Run AdslTaskBar rundll32.exe stmctrl.dll,TaskBar
Reg\HKLM\Run BDMCon "C:\Program Files\Softwin\BitDefender9\bdmcon.exe"
Reg\HKLM\Run BDNewsAgent "C:\Program Files\Softwin\BitDefender9\bdnagent.exe"
Reg\HKLM\Run BDOESRV "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"
Reg\HKLM\Run BDSwitchAgent "C:\Program Files\Softwin\BitDefender9\bdswitch.exe"
Reg\HKCU\Run taskdir C:\WINDOWS\System32\taskdir.exe
Reg\HKCU\Run xp_system C:\WINDOWS\inet20001\services.exe
Reg\HKCU\Run eMuleAutoStart C:\Program Files\eMule\emule.exe -AutoStart

rAPPORT DE BITFENDER

BitDefender Online Scanner

Scan report generated at: Fri, May 05, 2006 - 20:54:09

Scan path:

Statistics

Time
00:00:00

Files
3

Folders
0

Boot Sectors
3

Archives
0

Packed Files
0

Results

Identified Viruses
0

Infected Files
0

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
0

Engines Info

Virus Definitions
373377

Engine build
AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29)

Scan plugins
13

Archive plugins
39

Unpack plugins
4

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

No virus found.

aranjuez31 · Answer

re1/ ce n est pas le bon rapport d ewido - lis le tutorial pour bien fairehttp://perso.wanadoo.fr/entraide-hijackthis/Ewido/2/ ras ds online - tant mieux

aranjuez31 · Answer

vais m absenter jusqu au 14 inclusaffaires de la mama à régler - 96 balais, elle ne sait plus trop où elle habiteserai à l' océandodo à présent

la miss972 · Answer

voici le rapport ewido --------------------------------------------------------- ewido anti-malware - Rapport de scan--------------------------------------------------------- + Créé le:		22:42:53, 05/05/2006 + Somme de contrôle:	7627CDE7 + Résultats du scan:	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP13\A0018504.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP13\A0018532.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP13\A0018571.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP13\A0019573.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP13\A0020570.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP13\A0021570.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP13\A0023661.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP13\A0021597.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP13\A0022659.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP14\A0023667.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP14\A0023686.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP15\A0024691.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP15\A0025686.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP15\A0025697.EXE -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP15\A0025721.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP15\A0025745.exe -> Trojan.Small.bh : Erreur durant le nettoyage	C:\System Volume Information\_restore{EC2F2C38-19D8-45F4-9B20-2D4F8B5B1E69}\RP17\A0031944.dll -> Logger.VB.mz : Nettoyer et sauvegarder	C:\Documents and Settings\ginger\Cookies\ginger@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder	C:\Documents and Settings\ginger\Cookies\ginger@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyer et sauvegarder	C:\Documents and Settings\ginger\Cookies\ginger@web2.realtracker[1].txt -> TrackingCookie.Realtracker : Nettoyer et sauvegarder	C:\Documents and Settings\ginger\Cookies\ginger@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder	C:\Documents and Settings\ginger\Cookies\ginger@estat[1].txt -> TrackingCookie.Estat : Nettoyer et sauvegarder	C:\Documents and Settings\ginger\Cookies\ginger@adtech[1].txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder	C:\Documents and Settings\ginger\Cookies\ginger@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder	C:\Documents and Settings\ginger\Cookies\ginger@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder	C:\Documents and Settings\ginger\Cookies\ginger@weborama[1].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder	C:\Documents and Settings
\Cookies
@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder	C:\Documents and Settings
\Cookies
@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyer et sauvegarder	C:\Documents and Settings
\Cookies
@weborama[1].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder::Fin du rapport

la miss972 · Answer

salut jai pas trouver C:\System Volume Information\_restore dois quand meme poursuivre le reste ? cest a dire creer un pojnt de restauration en plus ya 2 disque dur le c et le f

la miss972 · Answer

Logfile of HijackThis v1.99.1Scan saved at 13:49:15, on 06/05/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\WINDOWS\system32\pctspk.exeC:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exeC:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exeC:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Softwin\BitDefender9\vsserv.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\PROGRA~1\MESSAG~1\StartMessager.exeC:\WINDOWS\sachostx.exeC:\WINDOWS\System32undll32.exeC:\Program Files\Softwin\BitDefender9\bdmcon.exeC:\Program Files\Softwin\BitDefender9\bdoesrv.exeC:\Program Files\Softwin\BitDefender9\bdnagent.exeC:\Program Files\Softwin\BitDefender9\bdswitch.exeC:\Program Files\eMule\emule.exeC:\WINDOWS\System32\sachostp.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\WINDOWS\System32\sachostc.exeC:\WINDOWS\System32\sachosts.exeC:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXER1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ool.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.comR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensF2 - REG:system.ini: UserInit=userinit.exeO2 - BHO: XBTB04715 - {A8B0BDED-64A5-495b-97DA-42C0301E229B} - (no file)O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: (no name) - {77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F} - (no file)O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dllO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager WanadooO4 - HKLM\..\Run: [sachost] C:\WINDOWS\sachostx.exeO4 - HKLM\..\Run: [Microsoft Windows Logon Process] C:\WINDOWS\winlogon.exeO4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBarO4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender9\bdmcon.exe"O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender9\bdnagent.exe"O4 - HKLM\..\Run: [BDSwitchAgent] "C:\Program Files\Softwin\BitDefender9\bdswitch.exe"O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStartO8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.htmlO8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.htmlO8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.htmlO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.htmlO9 - Extra button: (no name) - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\System32\mscoree.DLLO9 - Extra 'Tools' menuitem: Tri&xie Options... - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\System32\mscoree.DLLO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O15 - Trusted Zone: *.media-motor.netO15 - Trusted Zone: *.mmohsix.comO16 - DPF: {5526B4C6-63D6-41A1-9783-0FABF529859A} - http://cabs.media-motor.net/cabs/joysavsht.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{8649640A-FFB7-4D4A-9FF3-D415082BC04A}: NameServer = 217.175.160.11 217.175.160.12O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O21 - SSODL: SysTray.Exgl - {636821FC-6F5C-2f1b-B164-E67214F678E2} - (no file)O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown owner - C:\WINDOWS\winlogon.exe" -service (file missing)O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor
etmon.exe (file missing)O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exeO23 - Service: Windows User Mode Driver Framework (UMWdf) - Unknown owner - C:\WINDOWS\System32\wdfmgr.exe (file missing)O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)O23 - Service: Windows System Tray - Unknown owner - C:\WINDOWS\systay.exe (file missing)O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

la miss972 · Answer

Logfile of HijackThis v1.99.1
Scan saved at 13:49:15, on 06/05/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Softwin\BitDefender9\vsserv.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\WINDOWS\sachostx.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Softwin\BitDefender9\bdmcon.exe
C:\Program Files\Softwin\BitDefender9\bdoesrv.exe
C:\Program Files\Softwin\BitDefender9\bdnagent.exe
C:\Program Files\Softwin\BitDefender9\bdswitch.exe
C:\Program Files\eMule\emule.exe
C:\WINDOWS\System32\sachostp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\sachostc.exe
C:\WINDOWS\System32\sachosts.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ool.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: XBTB04715 - {A8B0BDED-64A5-495b-97DA-42C0301E229B} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [sachost] C:\WINDOWS\sachostx.exe
O4 - HKLM\..\Run: [Microsoft Windows Logon Process] C:\WINDOWS\winlogon.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender9\bdmcon.exe"
O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender9\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "C:\Program Files\Softwin\BitDefender9\bdswitch.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\System32\mscoree.DLL
O9 - Extra 'Tools' menuitem: Tri&xie Options... - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\System32\mscoree.DLL
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O15 - Trusted Zone: *.media-motor.net
O15 - Trusted Zone: *.mmohsix.com
O16 - DPF: {5526B4C6-63D6-41A1-9783-0FABF529859A} - http://cabs.media-motor.net/cabs/joysavsht.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8649640A-FFB7-4D4A-9FF3-D415082BC04A}: NameServer = 217.175.160.11 217.175.160.12
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: SysTray.Exgl - {636821FC-6F5C-2f1b-B164-E67214F678E2} - (no file)
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown owner - C:\WINDOWS\winlogon.exe" -service (file missing)
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe (file missing)
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Windows User Mode Driver Framework (UMWdf) - Unknown owner - C:\WINDOWS\System32\wdfmgr.exe (file missing)
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: Windows System Tray - Unknown owner - C:\WINDOWS\systay.exe (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

la miss972 · Answer

resalut ai pu telecharger zone lab mais je recoit un message :
le programme d'installation ne peut pas fermer le services truevector pour poursuvre linstallation utiliser le gestionnaiore de services pour fermer le service truevector puis redemmarrer le programme dinstallation .

Comment faire pour le fermer ?

la miss972 · Answer

KASPERSKY ON-LINE SCANNER REPORT  Saturday, May 06, 2006 9:25:12 PMOperating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)Kaspersky On-line Scanner version: 5.0.78.0Kaspersky Anti-Virus database last update: 6/05/2006Kaspersky Anti-Virus database records: 180405  Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true  Scan Target My Computer C:\D:\E:\F:\G:\H:\   Scan Statistics Total number of scanned objects 128866 Number of viruses found 25 Number of infected objects 55 Number of suspicious objects 3 Duration of the scan process 01:20:17 Infected Object Name Virus Name Last Action C:\VSL02.exe/data0004  Infected: Trojan-Downloader.Win32.Small.ctp  skipped   C:\VSL02.exe/data0005  Infected: Trojan-Downloader.Win32.Small.ajc  skipped   C:\VSL02.exe  NSIS: infected - 2  skipped   C:\WINDOWS\system32\sachostp.exe  Infected: Trojan-PSW.Win32.Small.bh  skipped   C:\WINDOWS\system32\oleext.dll  Infected: Trojan.Win32.Small.ev  skipped   C:\WINDOWS\system32\sachostc.exe  Infected: Packed.Win32.Tibs  skipped   C:\WINDOWS\system32\sachosts.exe  Infected: Packed.Win32.Tibs  skipped   C:\WINDOWS\system32\slx.exer  Infected: Packed.Win32.Tibs  skipped   C:\WINDOWS\system32\kernels8.exe  Infected: Packed.Win32.Tibs  skipped   C:\WINDOWS\Temp	sinstall_4_0_4_0_b4.exe/WISE0009.BIN  Infected: Trojan-Downloader.Win32.TSUpdate.n  skipped   C:\WINDOWS\Temp	sinstall_4_0_4_0_b4.exe/WISE0010.BIN  Infected: Trojan-Downloader.Win32.TSUpdate.p  skipped   C:\WINDOWS\Temp	sinstall_4_0_4_0_b4.exe/WISE0011.BIN  Infected: Trojan-Downloader.Win32.TSUpdate.l  skipped   C:\WINDOWS\Temp	sinstall_4_0_4_0_b4.exe/WISE0012.BIN  Infected: Trojan-Downloader.Win32.TSUpdate.f  skipped   C:\WINDOWS\Temp	sinstall_4_0_4_0_b4.exe  WiseSFX: infected - 4  skipped   C:\WINDOWS\hddisk.exe/mc-110-12-0000336.exe/data0001  Infected: Trojan-Downloader.NSIS.Agent.p  skipped   C:\WINDOWS\hddisk.exe/mc-110-12-0000336.exe  Infected: Trojan-Downloader.NSIS.Agent.p  skipped   C:\WINDOWS\hddisk.exe/mediam.exe  Infected: Trojan.Win32.LowZones.cr  skipped   C:\WINDOWS\hddisk.exe/my.exe  Infected: Trojan-Downloader.Win32.VB.abs  skipped   C:\WINDOWS\hddisk.exe/drsmartload195a.exe  Infected: Trojan-Downloader.Win32.Adload.ap  skipped   C:\WINDOWS\hddisk.exe  RAR: infected - 5  skipped   C:\WINDOWS\mdrive\mc-110-12-0000336.exe/data0001  Infected: Trojan-Downloader.NSIS.Agent.p  skipped   C:\WINDOWS\mdrive\mc-110-12-0000336.exe  NSIS: infected - 1  skipped   C:\WINDOWS\optimize.exe  Infected: Trojan-Downloader.Win32.Dyfuca.ey  skipped   C:\WINDOWS\WPRE.exe/data0004  Infected: Trojan-Downloader.Win32.Small.ctb  skipped   C:\WINDOWS\WPRE.exe/data0005  Infected: Trojan-Downloader.Win32.Small.ajc  skipped   C:\WINDOWS\WPRE.exe  NSIS: infected - 2  skipped   C:\WINDOWS\uninstDsk.exe  Infected: Trojan.Win32.Small.ev  skipped   C:\lo957362506.exe  Infected: Packed.Win32.Tibs  skipped   C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Deskwizz.zip/sk02.exe  Suspicious: Password-protected-EXE  skipped   C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Deskwizz.zip  ZIP: suspicious - 1  skipped   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KDMR4PSR\WPRE[1].exe/data0004  Infected: Trojan-Downloader.Win32.Small.ctb  skipped   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KDMR4PSR\WPRE[1].exe/data0005  Infected: Trojan-Downloader.Win32.Small.ajc  skipped   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KDMR4PSR\WPRE[1].exe  NSIS: infected - 2  skipped   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UXIHMF61\sk02[1].exe/data0002  Infected: Trojan-Clicker.Win32.Small.jf  skipped   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UXIHMF61\sk02[1].exe  NSIS: infected - 1  skipped   C:\Documents and Settings\ginger\Local Settings\Temp\91.tmp  Infected: Trojan.Win32.VB.amg  skipped   C:\Documents and Settings\ginger\Local Settings\Temp\99.tmp  Infected: Packed.Win32.Tibs  skipped   C:\Documents and Settings\ginger\Local Settings\Temp\93.tmp  Infected: Trojan.Win32.VB.amg  skipped   C:\Documents and Settings\ginger\Local Settings\Temp\98.tmp  Infected: Packed.Win32.Tibs  skipped   C:\Documents and Settings\ginger\Local Settings\Temp\MPC7.tmp  Infected: Trojan.Win32.Harnig.a  skipped   C:\Documents and Settings
\Local Settings\Temp\dmx8.tmp  Infected: Trojan.Win32.Small.ev  skipped   C:\Documents and Settings
\Local Settings\Temp\dmx9.tmp  Infected: Trojan-Downloader.Win32.Small.ckj  skipped   C:\Documents and Settings
\Local Settings\Temporary Internet Files\Content.IE5\QRSQQLL8\jbwecojiuf[1].htm  Infected: Trojan.Win32.Harnig.a  skipped   C:\Documents and Settings
\Local Settings\Temporary Internet Files\Content.IE5\YWTAIORX\mudoa[1].htm  Infected: Trojan.Win32.Harnig.a  skipped   C:\Program Files\secure32.html  Infected: Trojan.Win32.Harnig.a  skipped   C:\SnowballWarsInstaller.exe/data0006  Infected: Trojan-Downloader.Win32.PurityScan.cf  skipped   C:\SnowballWarsInstaller.exe  NSIS: infected - 1  skipped   F:\RECYCLER\S-1-5-21-329068152-492894223-839522115-500\Df8\ace.dll  Infected: Trojan.Win32.Crypt.t  skipped   F:\RECYCLER\S-1-5-21-329068152-492894223-839522115-500\Df8\webatl.exe  Infected: Trojan.Win32.Crypt.t  skipped   F:\RECYCLER\S-1-5-21-329068152-492894223-839522115-500\Df8\WinGenerics.dll  Infected: Trojan.Win32.Crypt.t  skipped   F:\System Volume Information\_restore{8F67E103-8EE7-49A4-BECE-E56D52005E7C}\RP10\A0018573.exe  Infected: Trojan-Downloader.Win32.IstBar.gen  skipped   F:\System Volume Information\_restore{8F67E103-8EE7-49A4-BECE-E56D52005E7C}\RP10\A0020656.exe  Infected: Trojan-Downloader.Win32.IstBar.ij  skipped   F:\System Volume Information\_restore{8F67E103-8EE7-49A4-BECE-E56D52005E7C}\RP10\A0020657.exe  Infected: Trojan-Downloader.Win32.IstBar.ij  skipped   F:\System Volume Information\_restore{8F67E103-8EE7-49A4-BECE-E56D52005E7C}\RP11\A0023161.exe  Infected: Trojan-Downloader.Win32.IstBar.gen  skipped   F:\WINDOWS\system32\cmsaffic.exe  Infected: Trojan.Win32.Crypt.t  skipped   F:\WINDOWS\system32\driversio04nt5.sys  Suspicious: Rootkit.Win32.Agent.ao  skipped   F:\WINDOWS\system32\mgmecell.exe  Infected: Trojan.Win32.Crypt.t  skipped   F:\WINDOWS\system32\wmipdh.dll  Infected: Trojan.Win32.Crypt.t  skipped   Scan process completed.

la miss972 · Answer

salut  jai un petit probleme quand je dois faire le scan en ligne sa me met tout en bas erreur de page java script et je peuxx  pas faire le scan aider moi

la miss972 · Answer

salut boulepate62 javais ecris que javais refais l'installation de windows xp et que cela ma donner 2 disques dur le C et le F

LE C sappel backup
le F hdd

comment faire pour enlever le disque C

car sur le disque F jai tout mes document et jarrive pas a les prendre ca me donne des messages d'erreur

bon je vais faire ce que tu as dit pour kerio je te dirais ce que ca donne

la miss972 · Answer

salut cest bon jai pu reinstaller la jai plus de spyware pour le moment  fais vous faire signe si ya un autre probleme merci

Aider moi svp virus spyware

17 réponses

Discussions similaires

Newsletters