rocketbird

Re, Merci pour la reponse super rapide J'ai viré ces 2 la, puis repassé ewido. O4 - HKCU\..\Run: [Fviwt] C:\WINDOWS\system32\?icrosoft\??xplore.exe O4 - HKCU\..\Run: [Toae] "C:\PROGRA~1\DOBE~1\iexplore.exe" -vt ndrv Maintenant ewido me trouve plus rien. Avec HijackThis j'ai ca now, ca a l'air clean ? Très grand merci !!! Logfile of HijackThis v1.99.1 Scan saved at 14:09:17, on 17/07/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\ClipX\clipx.exe C:\program files\dell\traytool.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\Program Files\Mozilla Thunderbird\thunderbird.exe C:\Program Files\WaterProof\PHPEdit\2.6.0\PHPEdit.exe C:\PROGRA~1\WATERP~1\PHPEdit\262A7D~1.0\DBGLIS~1.EXE C:\Program Files\TextPad 4\TextPad.exe C:\HijackThis\HijackThis.exe O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [ClipX] C:\Program Files\ClipX\clipx.exe O4 - HKLM\..\Run: [ToolExe] c:\program files\dell\traytool.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O17 - HKLM\System\CCS\Services\Tcpip\..\{9D015D10-EDEC-4DEA-A326-D3EC7598729D}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS1\Services\Tcpip\..\{9D015D10-EDEC-4DEA-A326-D3EC7598729D}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS2\Services\Tcpip\..\{9D015D10-EDEC-4DEA-A326-D3EC7598729D}: NameServer = 212.27.53.252,212.27.54.252 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

Probleme de popup sous IE, pubs pour WinAntivirus 2006. Avast => Scan complet OK Adaware => Scan complete OK Ewido => Scan complet, trouve des trucs => delete, mais quand je relace IE, si je refais un scan qq minutes apres, il y a de nouveau 3 / 4 elements infectés. Help ! Thx Logfile of HijackThis v1.99.1 Scan saved at 11:58:08, on 17/07/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\ClipX\clipx.exe C:\program files\dell\traytool.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\Program Files\WaterProof\PHPEdit\2.6.0\PHPEdit.exe C:\PROGRA~1\WATERP~1\PHPEdit\262A7D~1.0\DBGLIS~1.EXE C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\Program Files\Mozilla Thunderbird\thunderbird.exe C:\WINDOWS\system32\notepad.exe C:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\HijackThis\HijackThis.exe O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [ClipX] C:\Program Files\ClipX\clipx.exe O4 - HKLM\..\Run: [ToolExe] c:\program files\dell\traytool.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O4 - HKCU\..\Run: [Fviwt] C:\WINDOWS\system32\?icrosoft\??xplore.exe O4 - HKCU\..\Run: [Toae] "C:\PROGRA~1\DOBE~1\iexplore.exe" -vt ndrv O17 - HKLM\System\CCS\Services\Tcpip\..\{9D015D10-EDEC-4DEA-A326-D3EC7598729D}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS1\Services\Tcpip\..\{9D015D10-EDEC-4DEA-A326-D3EC7598729D}: NameServer = 212.27.53.252,212.27.54.252 O17 - HKLM\System\CS2\Services\Tcpip\..\{9D015D10-EDEC-4DEA-A326-D3EC7598729D}: NameServer = 212.27.53.252,212.27.54.252 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE