roberti

Merci pour ses infos je vais essayé !

Bonjour, Je suis infecter par des malawares !! J'ai essayé de les effacé mais ils corriaces !! Sa fait un moment que j'en ai pas choper au moin 3 ans !! J'aurais essayé de formaté et de réinstallé windows mais j'ai des fichiers importants donc impossible !! Voici mon rapport : Logfile of HijackThis v1.99.1 Scan saved at 10:17:00, on 09/05/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: F:\WINDOWS\System32\smss.exe F:\WINDOWS\system32\winlogon.exe F:\WINDOWS\system32\services.exe F:\WINDOWS\system32\lsass.exe F:\WINDOWS\system32\svchost.exe F:\WINDOWS\System32\svchost.exe F:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe F:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe F:\WINDOWS\Explorer.EXE F:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe F:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe F:\WINDOWS\system32\spoolsv.exe F:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe F:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe F:\PROGRA~1\Norton SystemWorks\Norton Utilities\NPROTECT.EXE F:\WINDOWS\system32\nvsvc32.exe F:\PROGRA~1\Norton SystemWorks\Norton Utilities\Speed Disk\NOPDB.EXE F:\WINDOWS\system32\svchost.exe F:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe F:\WINDOWS\system32\ZoneLabs\vsmon.exe F:\Program Files\Antivirus\ZoneAlarm\zlclient.exe F:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe F:\Program Files\DVD\CyberLink\PowerDVD\PDVDServ.exe F:\WINDOWS\system32\dla\tfswctrl.exe F:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe F:\WINDOWS\system32\wuauclt.exe F:\Program Files\Web\Avant Browser\avant.exe F:\Program Files\Antivirus\Ad-Aware SE Professional\Ad-Watch.exe F:\Program Files\Web\Avant Browser\avant.exe F:\WINDOWS\system32\d3zo32.exe E:\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://F:\WINDOWS\ayrrg.dll/sp.html#12345 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://F:\WINDOWS\ayrrg.dll/sp.html#12345 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://F:\WINDOWS\ayrrg.dll/sp.html#12345 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://F:\WINDOWS\ayrrg.dll/sp.html#12345 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://F:\WINDOWS\ayrrg.dll/sp.html#12345 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://F:\WINDOWS\ayrrg.dll/sp.html#12345 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.real.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - Default URLSearchHook is missing O2 - BHO: Class - {038102A8-6BBF-3523-E9F7-013C8EC35F4A} - F:\WINDOWS\system32\atlie32.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - F:\PROGRA~1\Web\FlashGet\jccatch.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - F:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - F:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - F:\PROGRA~1\Web\FlashGet\fgiebar.dll O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.dll,CMICtrlWnd O4 - HKLM\..\Run: [Zone Labs Client] "F:\Program Files\Antivirus\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [ccApp] "F:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [symantec NetDriver Monitor] F:\PROGRA~1\SymNetDrv\SNDMon.exe /Consumer O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [RemoteControl] "F:\Program Files\DVD\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [dla] F:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [iSUSPM Startup] F:\PROGRA~1\FICHIE~1\InstallShield\UpdateService\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "F:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DirectX Plugin] F:\WINDOWS\system32\dxreg.exe O4 - HKLM\..\Run: [avant.exe] F:\Program Files\Web\Avant Browser\avant.exe O4 - HKLM\..\Run: [AWMON] "F:\Program Files\Antivirus\Ad-Aware SE Professional\Ad-Watch.exe" O4 - HKLM\..\Run: [iplp32.exe] F:\WINDOWS\iplp32.exe O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE F:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu O4 - HKLM\..\RunOnce: [msen.exe] F:\WINDOWS\system32\msen.exe O4 - HKLM\..\RunOnce: [AAW] "F:\Program Files\Antivirus\Ad-Aware SE Professional\Ad-Aware.exe" "+b1" O4 - HKCU\..\Run: [Norton SystemWorks] "F:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz O4 - HKCU\..\Run: [MsnMsgr] "F:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - Global Startup: Bananasplit-XP.lnk = ? O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: SpySubtract.lnk = F:\Program Files\SpySub.exe O8 - Extra context menu item: Bloquer ce serveur... - F:\Program Files\Web\Avant Browser\AddAllToADBlackList.htm O8 - Extra context menu item: Bloquer cette publicité... - F:\Program Files\Web\Avant Browser\AddToADBlackList.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://F:\PROGRA~1\Microsoft Office\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Ouvrir tous les liens de la page... - F:\Program Files\Web\Avant Browser\OpenAllLinks.htm O8 - Extra context menu item: Rechercher sur le Web... - F:\Program Files\Web\Avant Browser\Search.htm O8 - Extra context menu item: Sothink SWF Catcher - F:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O8 - Extra context menu item: Surligner - F:\Program Files\Web\Avant Browser\Highlight.htm O8 - Extra context menu item: Télécharger avec FlashGet - F:\Program Files\Web\FlashGet\jc_link.htm O8 - Extra context menu item: Télécharger tout avec FlashGet - F:\Program Files\Web\FlashGet\jc_all.htm O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\Microsoft Office\OFFICE11\REFIEBAR.DLL O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - F:\PROGRA~1\Web\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - F:\PROGRA~1\Web\FlashGet\flashget.exe O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - F:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - F:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O15 - Trusted Zone: http://*.aneantis-project.com O23 - Service: Network Security Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - F:\WINDOWS\apiqi.exe (file missing) O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - F:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - F:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - F:\PROGRA~1\Norton SystemWorks\Norton Utilities\NPROTECT.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe O23 - Service: SAVScan - Symantec Corporation - F:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - F:\PROGRA~1\FICHIE~1\Symantec Shared\Script Blocking\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Speed Disk service - Symantec Corporation - F:\PROGRA~1\Norton SystemWorks\Norton Utilities\Speed Disk\NOPDB.EXE O23 - Service: Symantec Core LC - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - F:\WINDOWS\system32\ZoneLabs\vsmon.exe Je remercie d'avance de la réponse car sa fait 3 jours que sa m'énerve !!